Security fixes target the latest code on the main branch.

Please do not open a public issue for a suspected vulnerability. Use GitHub private vulnerability reporting when available, or contact the maintainers privately with a clear description, impact, and reproduction steps.