Security fixes are provided for the latest development release on main. The legacy 0.1 API is no longer supported.

Please use GitHub's Report a vulnerability flow in the repository Security tab. Do not open a public issue for vulnerabilities involving authentication, secret disclosure, request routing, or TLS validation.

Include affected versions, reproduction steps, impact, and any suggested mitigation. You should receive an acknowledgement within seven days.