Security fixes are provided for the latest tagged release. Upgrade to the latest version before reporting an issue that may already be resolved.
Do not open a public issue for a suspected vulnerability. Use GitHub's private
vulnerability reporting for this repository. If that channel is unavailable,
email andreunix@proton.me with affected versions, reproduction steps, and
potential impact.
Allow a reasonable period for investigation and coordinated disclosure. Do not access data that is not yours, disrupt services, or publicly disclose an unresolved vulnerability.