Security fixes are applied to the latest main branch.
Please report suspected vulnerabilities privately to the maintainer, using GitHub's private vulnerability reporting when available. If it is unavailable, contact the maintainer privately to arrange a report.
Include the affected version, steps to reproduce and the potential impact. Please omit passwords, authentication cookies and private account data.
Avoid public issues for security reports until the issue has been reviewed.