Security updates are currently provided for the latest published major version.

Please report vulnerabilities privately and do not open public issues for active security concerns.

Include:

• Affected version
• Reproduction details
• Impact assessment
• Suggested mitigation (if known)

Temporary contact path for private reports:

• Open a private security advisory in the repository (preferred), or
• Contact the maintainer directly through configured repository contact channels.

1. Acknowledge report receipt.
2. Validate and triage severity.
3. Prepare fix and tests.
4. Coordinate disclosure timing.
5. Publish patched version and advisory notes.