Please do not open public issues for security vulnerabilities.
Report vulnerabilities privately to:
Please include affected version, reproduction steps, and impact.
Runtime security notes and hardening guidance are documented in:
This includes deserialization risks, cache directory permissions, and cache key guidance.