Please report suspected vulnerabilities privately to the repository maintainers through a private reporting channel on the repository hosting platform. If that option is unavailable, request a private contact channel without posting technical details in a public issue.

Include affected versions or commits, a reproduction, expected impact, and any suggested mitigation. Do not include private keys, customer data, or live credentials. Maintainers will acknowledge the report and coordinate a fix and disclosure timeline with the reporter.

This repository does not currently promise a fixed response time or security support for older releases.