Please report suspected vulnerabilities through this repository’s Report a vulnerability link on the Security tab. This creates a private security advisory visible only to the maintainers. Do not open a public issue or include exploit details in a public discussion.

Include the affected version or commit, the impact, and a minimal reproduction when possible. Maintainers will acknowledge the report and coordinate a fix and disclosure.

If private vulnerability reporting is unavailable, contact the repository owner through their GitHub profile and ask for a private channel.