Reporting vulnerabilities

Please do not open a public issue for security vulnerabilities.

Report privately through GitHub's private vulnerability reporting on this repository (Security → Report a vulnerability). Include reproduction steps, impact, and affected versions when known.

See SECURITY.md for the complete reporting guidance.