Upgrade to 2.x before you report an issue that affects an older version.

Use a GitHub Security Advisory to report a vulnerability. Do not open a public issue.

We aim to acknowledge reports within five business days. We will provide updates about the fix and disclosure timeline.