Please report security vulnerabilities to the repository maintainers via GitHub's private vulnerability reporting.

Do NOT open a public issue.

We aim to acknowledge reports within 48 hours and provide a fix or mitigation within 7 days.