Supported versions: latest release on PyPI.

If you discover a vulnerability:

1. Do not open a public issue with details.
2. Email the maintainers (contact listed on PyPI) with steps to reproduce and impact.
3. We’ll acknowledge within a week and share a remediation timeline.

Thank you for responsibly disclosing.