Only the latest release is actively supported with security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities by opening a GitHub Security Advisory in this repository. Include as much detail as possible:

• A description of the vulnerability and its potential impact
• Steps to reproduce or a proof-of-concept
• Any suggested mitigations or fixes

You can expect an acknowledgement within 72 hours and a status update as the issue is investigated. If the vulnerability is confirmed, a fix will be prioritised and a new release issued. You will be credited in the release notes unless you prefer otherwise.