Security fixes, when available, are made against the latest code on main.

This project does not currently provide a private security reporting channel.

If you believe you have found a security issue, please open a GitHub issue. Please keep the initial report high-level and avoid posting proof-of-concept exploit details, private data, or sensitive environment information until the issue has been triaged.

Include the following where possible:

• affected version or commit
• operating system and desktop environment
• steps to reproduce
• expected behavior and actual behavior
• impact of the issue
• relevant logs or screenshots, with secrets removed

Reports will be reviewed as maintainer time allows. If the issue is confirmed, the fix will be made in public in this repository.