During the 0.x series, only the latest released version receives security fixes.

Please report security issues privately via GitHub's private vulnerability reporting, not through public issues or pull requests.

We aim to acknowledge reports within 72 hours and to ship a fix or mitigation as quickly as the severity warrants. Please give us a reasonable window to remediate before any public disclosure.