Please use GitHub's private vulnerability reporting to report security issues. This keeps the report confidential until a fix is available.

Do not open a public issue for security vulnerabilities.

This is a side project maintained in spare time. Critical vulnerabilities will be prioritized, but please allow reasonable time for a response.

We follow coordinated disclosure — fixes will be released before public details are shared.