Please do not open a public GitHub issue for security vulnerabilities.

Report privately via GitHub's Security Advisory feature. We will respond within 72 hours and coordinate a fix and disclosure timeline with you.