Security fixes are provided for the latest stable major release line only.
Current supported line: 4.x
Older tags may remain available for compatibility testing, but they should not be treated as security-supported releases.
Please do not open a public issue for a suspected security vulnerability.
Instead, use GitHub Security Advisories for private reporting:
Include:
- affected version or tag
- impact summary
- reproduction steps or proof of concept
- any suggested mitigation or workaround
We will acknowledge receipt, assess impact, and coordinate disclosure once a fix is available.