Security fixes target the latest published release. Please upgrade to the latest release before checking whether a reported problem still occurs. Older releases do not receive backported fixes.

Report suspected vulnerabilities privately to ben@ben3d.ca. Include affected versions, reproduction steps, impact, and any suggested mitigation. Do not open a public issue containing exploit details. Coordinate public disclosure with the maintainer after a fix is available.