Security updates are provided for the two most recent stable releases.

Please do not open a public GitHub issue for security vulnerabilities.

Use GitHub's private vulnerability reporting instead: 👉 Report a vulnerability

You can expect an initial response within 72 hours. If the vulnerability is confirmed, a fix will be released as soon as possible and credited to the reporter.