Do not disclose vulnerabilities in a public issue. Report a suspected vulnerability through GitHub's private vulnerability reporting for this repository. Include affected versions, reproduction steps, and impact when possible.

Balsa UI is pre-1.0. Security fixes target the current published release.