Security fixes are provided for the latest release series and the current main branch.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting to share a description, reproduction steps, affected versions, and any known mitigation. If the private reporting form is unavailable, email the maintainer at kshinohara0508@gmail.com.

The maintainers will acknowledge the report when it is reviewed and will coordinate disclosure and a fix as appropriate. No fixed response-time service level is promised.