Please report vulnerabilities privately via GitHub's "Report a vulnerability" (Security advisories) for this repository, not through public issues. All released versions are in scope until stated otherwise.