Please do not open a public issue for security-sensitive reports.

Send details to IndopenSource maintainers through a trusted private channel, or open a GitHub security advisory if it is enabled for this repository.

Include:

• A summary of the issue.
• Steps to reproduce.
• Impact and affected pages or workflows.
• Suggested fix, if known.

Maintainers will acknowledge valid reports and coordinate a fix before public disclosure when appropriate.