Security fixes are applied to the latest version on the main branch.

Do not open a public issue for a suspected vulnerability. Email the repository owner through the contact method listed on the GitHub profile with a minimal reproduction and impact summary. Do not include secrets or proprietary source code.