Fixes are released for the latest published version of DragoAnt.Observer.Abstractions and DragoAnt.Observer.Core only.

Please report vulnerabilities privately through GitHub: open the repository's Security tab and choose Report a vulnerability (https://github.com/DragoAnt/Observer/security/advisories/new). Do not open a public issue.

Include the package version, the target framework, and a minimal input plus rules that reproduce the problem. A value that a rule should mask but appears unmasked in the output, or a hash that differs from the documented format, counts as a security issue.