Security updates are provided for the latest branch/version of the application only.

Report security issues on GitHub:

• Preferred: private vulnerability report. Go to the repository's Security tab and choose "Report a vulnerability". Only the maintainer can see the report until a fix is released.
• Open an issue for low-sensitivity problems, such as a vulnerable dependency flagged by an audit. Issues are public, so leave out working exploit details.
• Open a pull request if you already have a fix; PRs target the dev branch (see the Contributing guide).

To help us understand and resolve the issue quickly, include:

• An overview of the vulnerability.
• Steps to reproduce it.
• Any potential impact or suggested mitigations.

We aim to respond as quickly as possible.