main
- Use GitHub private vulnerability reporting for this repository.
- Do not open a public issue for a suspected security problem.
- Include the affected path, reproduction steps, impact, and any proof-of-concept details needed to validate the report.
The goal is coordinated disclosure and a fix before public discussion.