Only the latest 0.1.x release receives security fixes.

Please use GitHub private vulnerability reporting. Do not disclose a suspected vulnerability in a public issue, pull request, log, or example.

Include the affected version, platform, impact, minimal reproduction steps, and any suggested mitigation. Remove credentials, personal information, robot or facility secrets, and unrelated logs. The maintainer will acknowledge the report when received, investigate it, and coordinate disclosure and a fix when the issue is confirmed.