Security fixes are shipped on the latest release line.

Use GitHub Security Advisories for private reports:

1. Open the repository Security tab.
2. Start a private vulnerability report.
3. Include reproduction steps, impact, and any suggested fix.

Do not disclose exploitable details in a public issue until the report has been reviewed.