Security fixes are handled on the latest main branch until a release-branch policy exists.

Do not open public issues for suspected vulnerabilities. Use GitHub private vulnerability reporting when it is available for the repository, or contact the repository owner privately.