If you discover a security vulnerability, please report it responsibly.

Do NOT open a public issue.

Instead, please use the repository's private vulnerability reporting, and include:

1. A description of the vulnerability
2. Steps to reproduce the issue
3. Potential impact assessment
4. Any suggested fixes (optional)

You should receive an acknowledgement within 48 hours. We will work with you to understand and address the issue before any public disclosure.