Do not open public issues for suspected vulnerabilities or exposed credentials. Report them through the private security-advisory flow for this repository. Include reproduction details, affected revisions, and the smallest safe evidence needed to investigate.

Only the latest release on the default branch is supported with security updates.