Security fixes are applied to the latest released version of the package.

Please do not open public issues for security reports.

Use GitHub's private vulnerability reporting for this repository if it is enabled. Otherwise, contact the maintainer privately and include:

• a description of the issue
• affected versions
• reproduction steps or a proof of concept
• impact assessment

You should receive an acknowledgment within a reasonable time after the report is received.