Security updates are currently provided for the latest state of the master branch.

Please report security vulnerabilities privately:

1. Open a private report via GitHub Security Advisories for this repository.
2. Include impact, affected files/components, and reproducible steps.
3. If possible, include a suggested fix or mitigation.

Please do not open public issues for security vulnerabilities.

• Initial triage target: within 7 days
• Status updates will be shared as investigation progresses
• Coordinated disclosure will be used for confirmed vulnerabilities