Please do not report exploitable vulnerabilities in a public issue or pull request. Use GitHub's private vulnerability reporting for this repository if it is enabled. If it is not available, contact the repository maintainers privately through GitHub.

Include the affected version or commit, the relevant operating system, a concise impact description, and steps to reproduce where safe. Do not include real serial numbers, MAC addresses, exported hardware reports, credentials, or other private data.

Security fixes are intended for the current supported release. Until a release-support policy is published, report issues against the latest version or default branch.