Security Policy

Supported versions

Security fixes are applied to the latest release on main and to the most recent tagged release when practical.

Please report security issues privately via GitHub Security Advisories:

Include a clear description, impact, and reproduction steps if possible. We will acknowledge the report and work on a fix or coordinated disclosure.

Do not open public issues for vulnerabilities that could be exploited.