Please do not open public GitHub issues for security problems.

Use GitHub's private vulnerability reporting flow if it is enabled for the repository. If that is not available, contact the maintainer privately through GitHub and include:

• a description of the issue
• affected versions or commit hashes
• reproduction steps or a proof of concept
• any suggested mitigation

I will acknowledge valid reports as quickly as possible and coordinate a fix before public disclosure.

Security fixes are best-effort and prioritized for the latest release on the main branch.