This project is community-maintained. Security fixes are applied to the latest main branch.

Please do not open public issues for security vulnerabilities.

Instead, report details privately to the maintainers through GitHub private vulnerability reporting (if enabled) or via a private channel agreed by maintainers.

Include:

• Affected component(s)
• Reproduction steps
• Potential impact
• Suggested mitigation (if known)