Please report security issues privately. Do not open a public issue or pull request for them.

• Preferred: GitHub private vulnerability reporting. Use Report a vulnerability on this repository's Security tab.
• Email: nadir@nadirclaw.com

Please include the affected version or commit, steps to reproduce, and the impact you observed. We will acknowledge the report, keep you updated while we work on a fix, and agree on a disclosure date with you. Reporters are credited in the advisory unless they ask not to be.

Fixes land on main and ship in the next release. Only the latest release receives security fixes.