Until the first stable release, security fixes are applied to the latest development version.
Please use GitHub's private vulnerability reporting. Do not open a public issue for a suspected vulnerability.
Include the affected version, reproduction steps, impact, and any suggested mitigation. You should receive an acknowledgement within seven days. Please allow time for a fix and coordinated release before publishing details.