Please report security issues privately using GitHub’s Report a vulnerability form on this repository (Security tab).

Do not file public GitHub issues for security problems.

When reporting, please include:

• Affected project/repo and version(s)
• Impact and component(s) involved
• Reproduction steps or PoC (if available)
• Your contact and preferred credit name

Repository maintainers will assess reports and coordinate disclosure as appropriate:

• We assess impact and work on a fix or mitigation when appropriate.
• We may publish a security advisory once a fix or mitigation is available.
• We credit reporters when appropriate unless they request otherwise.