Security fixes are released for the latest version of the gem only.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them privately via GitHub's private vulnerability reporting ("Report a vulnerability" button under the repository's Security tab).

Please include as much of the following as you can:

• a description of the vulnerability and its impact
• steps to reproduce or a proof of concept
• affected versions
• any suggested fix

You should receive a response within a few days. Once the issue is confirmed, a fix will be prepared and released, and a security advisory will be published crediting you (unless you prefer to remain anonymous).