Security fixes are applied to the current version of the project in the default branch.

Do not disclose vulnerability details in a public issue before the vulnerability has been resolved.

Submit a private report through Security → Advisories → Report a vulnerability in the GitHub repository. Please include:

• the affected page or tool;
• step-by-step instructions for reproducing the issue;
• the potential impact;
• your browser and its version;
• a sample file or input data, if it can be shared safely.

Do not attach personal images, secrets, tokens, or any other confidential data.