Security fixes are applied to the latest release and the main branch.

Please use GitHub's private vulnerability reporting feature for this repository. Do not open a public issue for a suspected vulnerability. Include reproduction steps, affected versions, impact, and any suggested mitigation. You can expect an initial acknowledgement within seven days.