Please report vulnerabilities privately to the maintainers before public disclosure.
Suggested report content:
- Affected area/files
- Reproduction steps
- Impact assessment
- Suggested mitigation (if known)
This policy applies to source code in this repository and release artifacts generated from it.
Best effort initial response: within 7 days.