Security fixes target the latest release and the current main branch.

If you find a security issue, report it privately on GitHub. Include the affected version and steps to reproduce it. Please do not post security details in public issues.