Unless a repository states otherwise, only its latest release and current default branch receive security fixes. Proof-of-concept repositories are provided for research and education and may not be suitable for production use.

Please do not disclose security vulnerabilities in a public issue, discussion, pull request, or code comment.

1. Open the affected repository's Security tab.
2. Select Report a vulnerability when private vulnerability reporting is available.
3. If that option is unavailable, contact the maintainer through a private channel listed on the GitHub profile and request a secure reporting channel without including vulnerability details in the first message.

Include the affected repository and version, impact, reproduction steps, and any suggested mitigation. Reports will be acknowledged as soon as practical. Publication and remediation timelines will be coordinated with the reporter.