Please report security vulnerabilities privately using GitHub's private vulnerability reporting feature, rather than opening a public issue.

You should receive an initial response within a reasonable time. This is a small, single-maintainer project — please be patient, and thank you for helping keep it and its self-hosted deployments safe.

This project does not currently maintain multiple released versions — security fixes are applied to the latest commit on main only. If you're running an older deployment, update to the latest release.