Please do not report security vulnerabilities through public GitHub issues or pull requests.
Use GitHub's private vulnerability reporting to send a report to the repository maintainers. Include the affected version or commit, the potential impact, and steps to reproduce the issue. Do not include credentials, personal data, or production data in a report.
If private vulnerability reporting is unavailable, contact a repository maintainer privately through GitHub and ask for a secure reporting channel. Do not share vulnerability details in a public issue or discussion.
There is no formal version support matrix. Please report the affected version or commit and whether the issue is reproducible on the latest version.