Security fixes are provided for package lines that are currently documented as supported.
Please do not open a public issue for a suspected vulnerability.
Use GitHub's private vulnerability reporting / security advisory flow for this repository when available. Include a clear description, affected versions, reproduction details, and expected impact.
Security reports will be reviewed before public disclosure or release notes are prepared.