Please do not open public issues for security-sensitive problems.
Contact the repository maintainer privately with:
- Affected repository and component
- Steps to reproduce
- Impact assessment
Only the default branch (main or master) receives security fixes unless noted otherwise.