Please do not open public issues for security-sensitive bugs.
Instead, report privately via GitHub Security Advisories (preferred), or contact the maintainer directly.
Include:
- Affected version/commit
- Reproduction steps
- Potential impact
- Suggested fix (if available)
We will acknowledge reports as quickly as possible and coordinate a fix + disclosure timeline.