Please do not report security vulnerabilities via public GitHub Issues.
Report it privately through GitHub, by opening a draft security advisory, or send an email to shalaevad.alexey@gmail.com. Either way, include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact and affected versions
We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.
Once the fix is released, we will credit you in the release notes unless you prefer to remain anonymous.