Security fixes are applied to the latest release only.

Please use GitHub's private vulnerability reporting feature for this repository. Do not open a public issue with exploit details or secrets. Include affected versions, reproduction steps, impact, and any suggested mitigation. You should receive an acknowledgement within seven days.

Never submit production credentials, encryption keys, owner cookies, database dumps, or uploaded files in a report.