Please do not open a public issue for a suspected vulnerability.

Use GitHub's private vulnerability reporting for the affected repository when it is available. Otherwise contact Viktor Jannicke through the private contact method on the GitHub profile ViktorJannicke and include the affected package, version, impact, and a minimal reproduction.

Security fixes are prioritized for the latest published preview or stable version. Older previews may receive an upgrade recommendation instead of a backport. A coordinated disclosure date will be agreed before details are made public.