The latest release and current main branch receive security fixes.

Do not open a public issue. Use GitHub private vulnerability reporting to share the affected surface, reproduction steps, impact, and any proposed fix.

Do not include live tokens, OAuth credentials, private flag values, or customer identifiers in public issues or pull requests.