Please do not report security vulnerabilities in public GitHub issues.

Report a vulnerability privately through GitHub Security Advisories. Include a clear description, affected versions or components, reproduction steps, and any suggested mitigations. Maintainers will acknowledge valid reports and coordinate a fix and disclosure.