The latest 2.x release line receives security updates. Older major or pre-2.x releases should be considered unsupported unless explicitly noted in a release.

Please report suspected vulnerabilities through GitHub's private vulnerability reporting flow:

https://github.com/opencorex-org/react-helmet-pro/security/advisories/new

Please do not open public issues for security reports.

When possible, include:

• affected package version
• impact and attack scenario
• reproduction details or proof of concept
• any suggested remediation or patch direction

We will aim to acknowledge reports promptly and coordinate a fix before public disclosure.