Only the latest major release line receives security updates.
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately via GitHub private vulnerability reporting.
Please include as much of the following as you can:
- A description of the issue and its potential impact
- Steps to reproduce or a proof of concept
- Affected version(s) or commit(s)
You can expect an initial response within 5 business days.