Please use this repository's GitHub private vulnerability reporting or Security Advisory interface when it is available. Include the affected version or commit, reproduction steps, impact, and any proposed mitigation.

If GitHub does not offer a private reporting form, contact the current repository owner through the contact methods published on their GitHub profile. Do not send reports to Meta or Facebook addresses: this repository is an independently maintained fork.

Do not open a public issue containing exploit details, credentials, device data, or other information that would put users at risk before a fix is available.

Security fixes target the current main branch and the most recent GitHub release. Older builds may contain outdated third-party components and are not maintained as separate security branches.