Report suspected vulnerabilities privately to the maintainers before opening a public issue.
Include:
- --
Maintain confidentiality until a fix is available and a coordinated disclosure date is agreed.
Only the latest published release is supported with security fixes.