Please report suspected security vulnerabilities through GitHub private vulnerability reporting.

Do not open a public issue or discussion with exploit details.

Include the affected package or service, the relevant version or commit, reproduction steps, security impact, and any suggested mitigation. We will keep the report private while it is being investigated and coordinate disclosure with the reporter.

Security fixes are prioritized for the current main branch and the latest published package releases.