If you discover a security vulnerability, please report it via GitHub Security Advisories instead of the public issue tracker.

We will acknowledge receipt within 48 hours and provide a detailed response within 7 days.