Security updates are provided for the latest default branch.

Use private GitHub Security Advisories or direct maintainer contact. Include repro steps, impact, and affected versions.