Only the latest released version is supported with security fixes. There's no backport/LTS policy — please upgrade to the latest release before reporting.
Please do not open a public GitHub issue for security vulnerabilities.
Report privately instead, either via GitHub Security Advisories or by emailing mail@bathi.de.
Include the affected version, a description of the issue, and reproduction steps if you have them.
This is a single-maintainer open-source project with no formal SLA, but reports will be acknowledged and triaged as soon as possible.