Report vulnerabilities through the repository Security tab using Report a vulnerability. Enable private vulnerability reporting before publication. Include the affected version, reproduction and impact.

The latest released line is maintained by default. Older-line security fixes are evaluated per issue and recorded in release notes.