Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them via email or GitHub's private Security Advisory feature. Include as much detail as possible:

• A description of the vulnerability.
• Steps to reproduce or a proof-of-concept.
• Potential impact.

We aim to acknowledge reports within 72 hours and provide a fix or mitigation plan within 14 days for critical issues.