Please report security vulnerabilities privately via GitHub Security Advisories, or by email to jghoman@gmail.com.
Please do not open a public issue for security-sensitive reports.
You can expect an initial response within 7 days. If the issue is confirmed, a fix will be released as soon as possible, with credit to the reporter unless anonymity is requested.
Only the latest release on main receives security fixes.