Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue with exploit details or sensitive data.
Include the affected version, reproduction steps, impact, and any suggested mitigation. You should receive an acknowledgement within seven days. Supported versions and remediation timelines will be assessed with each report.