Security fixes are applied to the latest release on main.

Please do not report security vulnerabilities in public GitHub issues.

Use GitHub's private vulnerability reporting:

1. Go to the repository's Security tab
2. Click Report a vulnerability
3. Provide reproduction steps and impact details

If private reporting is unavailable, contact maintainers via GitHub private message.

This is a community-based project. We do not offer any guaranteed response time or SLA for security reports. We will do our best to review and address reports as community resources allow.

• We confirm the issue and assess severity as time and resources allow
• We prepare and test a fix
• We coordinate a release
• We publish an advisory with mitigation details