Only the latest release receives security fixes. Please keep your installation up to date.

Report privately via GitHub Security Advisories (Security tab -> "Report a vulnerability"). Do not open a public issue.

Include a description, the affected version and reproduction steps. Reports are acknowledged within a few days.