Hi maintainers,

I found a potential high-severity security issue in this project and would like to disclose it privately. GitHub private vulnerability reporting appears to be disabled for this repository, and I could not find a SECURITY.md with a preferred contact channel.

Could you please enable GitHub private vulnerability reporting or point me to the preferred private security contact? I can share the full details promptly through that channel.

Thanks.