The master branch is supported for security updates.
Do not disclose security issues publicly first.
Please report with:
- Impact summary
- Reproduction steps
- Suggested mitigation (if any)
If the issue can expose tokens, private data, or remote execution paths, avoid posting details in a public issue until a fix is ready.