Please report security vulnerabilities privately. Go to the repository's Security tab and choose Report a vulnerability. This uses GitHub private vulnerability reporting.

Do not open a public issue or pull request for a security problem.

These are hobby projects maintained in spare time. I try to respond to reports, but there is no guaranteed response time or fix timeline.

Only the latest version on the default branch is supported. Older commits, tags and forks are not patched.