# Security

Report suspected vulnerabilities through this repository's Security tab using
**Report a vulnerability**. Do not disclose vulnerabilities in public issues or
pull requests.

Include the affected version, reproduction steps, and the expected impact.
Never include live credentials or private user data.

Security fixes target the latest release. Older releases are not maintained
unless a maintainer explicitly announces otherwise.