Security fixes are provided for the latest release series.

Please do not open a public issue for vulnerabilities.

Use GitHub Security Advisories (preferred) or contact maintainers privately.

Include:

• Steps to reproduce
• Impact assessment
• Suggested mitigation (if known)

We aim to acknowledge reports within 72 hours.