Security fixes are applied to the active default branch (main).
Please do not open public issues for security vulnerabilities.
Report privately to project maintainers with:
- affected component/file,
- reproduction steps or proof of concept,
- impact assessment,
- any suggested remediation.
Maintainers will acknowledge receipt and coordinate next steps.