Please do not disclose suspected vulnerabilities in a public issue. Use GitHub's private vulnerability reporting for this repository when available, or contact the repository owner privately through their GitHub profile.

Include the affected component, reproduction conditions, impact, and a minimal proof of concept that does not expose real user data or credentials. You should receive an acknowledgement within seven days.

Only the latest revision of the main branch is supported with security fixes.