Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Report privately instead:
- GitHub private vulnerability reporting: Security → Report a vulnerability on this repository, or
- email eberharter@proton.me.
Include what you can: the affected version, reproduction steps, and expected impact. You will receive an acknowledgement within a few days. Please allow a reasonable window for a fix to ship before any public disclosure.
Only the latest released version receives security fixes.