Please report suspected vulnerabilities through GitHub private vulnerability reporting. Do not include secrets, private papers, provider credentials, or exploit details in a public issue.

Include the affected version or commit, deployment mode, reproduction steps, and the smallest redacted diagnostic bundle that demonstrates the issue. The maintainers will acknowledge the report, assess severity, and coordinate a fix and disclosure timeline with the reporter.

Only the latest public release is actively supported with security fixes.