Please report security vulnerabilities privately using GitHub's private vulnerability reporting — not a public issue.

Include reproduction steps and affected versions. Expect an initial response within 5 business days.

Only the latest commit on the default branch is supported.