This project currently supports the latest version on the main branch.

Please do not disclose security issues publicly before a fix is available.

Preferred process:

1. Open a private communication channel with maintainers (project discussion or direct contact).
2. Include impact, reproduction steps, and affected files/components.
3. Allow reasonable time for triage and patching before public disclosure.

If private contact is not available, open a minimal public issue without exploit details, and mark it clearly as a security concern.