Report suspected vulnerabilities through this repository's Security tab using “Report a vulnerability.” Include the affected version, reproduction steps, and likely impact. Use fictional data and redact credentials before submitting a report.
Please keep exploit details and personal information out of public issues. If private reporting is unavailable, open an issue asking for a private reporting channel without disclosing the vulnerability.
Security fixes target the latest release and the default branch. Older versions have no separate support commitment. This is an independently maintained project, so response times are not guaranteed.