Please do not open a public issue for security vulnerabilities.

Instead, report them privately via GitHub Security Advisories.

Include as much detail as you can: steps to reproduce, affected versions, and any suggested fixes. You will receive a response within 7 days.