If you discover a security vulnerability, please do not open a public issue.
Instead, report it privately by emailing the maintainer or using GitHub's private vulnerability reporting.
Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
You'll receive a response within 72 hours. Once confirmed, a fix will be prioritized and a security advisory published.