Until the first stable release, security fixes are applied to the latest development version.

Please use GitHub's private vulnerability reporting. Do not open a public issue for a suspected vulnerability.

Include the affected version, reproduction steps, impact, and any suggested mitigation. You should receive an acknowledgement within seven days. Please allow time for a fix and coordinated release before publishing details.