main is the supported branch.

Please do not open public issues for security-sensitive findings.

Use one of the following:

1. GitHub Security Advisory (preferred)
2. Private maintainer contact: https://github.com/YrustPd

Please include:

• Affected version/commit
• Reproduction steps
• Expected vs actual behavior
• Potential impact
• Suggested mitigation (if known)

You can expect an initial acknowledgement within 72 hours.