Security Policy

Reporting a vulnerability

Please report security issues privately via GitHub Security Advisories for this repository:

Do not open a public issue for vulnerabilities that could put users at risk.

Include steps to reproduce, affected versions, and impact if possible. We will aim to acknowledge reports within 7 days.