If you discover a security vulnerability, please do not open a public
issue. Instead, report it privately via
GitHub's private vulnerability reporting
on the affected repository (replace REPO with the actual repository name).
We'll respond as quickly as possible and keep you updated throughout the process.
Only the latest release of each project receives security patches.