Only the latest released version receives security fixes.

Report vulnerabilities through GitHub private vulnerability reporting.

Do not use public issues, pull requests, discussions, or chat channels for vulnerability reports. Include the affected version or commit, impact, reproduction steps, relevant logs, and any suggested mitigation when available.