Please do not open public GitHub issues for suspected security vulnerabilities.
Report security issues privately to the maintainer through GitHub security advisories or direct contact, and include:
- affected version or commit
- reproduction steps or proof of concept
- impact assessment
- any suggested mitigation
I will acknowledge reports as quickly as possible and coordinate a fix and disclosure timeline as needed.