This project does not currently maintain release branches — the main branch reflects the latest supported version. Security fixes are only applied there.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, use GitHub's private vulnerability reporting:

1. Go to the Security tab of this repository.
2. Click Report a vulnerability.
3. Include as much detail as you can: affected component (backend/ or frontend/), steps to reproduce, and potential impact.

We'll acknowledge new reports within 5 business days and keep you updated as we investigate and work on a fix. Once a fix is available, we'll coordinate on disclosure timing with you before making details public.