Security fixes are released for the current stable major version.

Please report vulnerabilities privately through GitHub Security Advisories or by emailing yowainwright@gmail.com.

Include the affected version, a description of the impact, reproduction steps, and any suggested fix if you have one. You can expect an initial response within 7 days. Confirmed vulnerabilities will be patched in a security release and documented after the fix is available.