Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Report privately instead:

• GitHub private vulnerability reporting: Security → Report a vulnerability on this repository, or
• email eberharter@proton.me.

Include what you can: the affected version, reproduction steps, and expected impact. You will receive an acknowledgement within a few days. Please allow a reasonable window for a fix to ship before any public disclosure.

Only the latest released version receives security fixes.