Please do not open a public issue for security problems.
Report vulnerabilities privately via GitHub: Security → Report a vulnerability (private vulnerability reporting).
Include affected endpoint/component, reproduction steps and impact. You will get a first response within 7 days.
Only the latest main branch is supported.