Only the latest release receives security fixes. The project is experimental while it is on the 0.x release line.

Please use Security → Report a vulnerability in this repository. Do not open a public issue for a vulnerability.

Include the affected version, impact, reproduction steps, and any suggested mitigation. Please avoid attaching live credentials or private repository data.