Security fixes are provided for the main branch. If you need a patch for an older release, open an issue to discuss.

Please report security issues privately.

Preferred channels:

• GitHub Security Advisories (if enabled for this repository)
• Direct contact with maintainers listed in GOVERNANCE.md

Include as much detail as possible: affected components, steps to reproduce, and impact. We will acknowledge receipt within 72 hours and provide a remediation plan as soon as possible.

We follow coordinated disclosure practices. Please allow reasonable time to investigate and remediate before public disclosure.