Please report vulnerabilities through GitHub private vulnerability reporting for this repository.
Do not open a public issue for security reports. Include the affected version, reproduction steps, expected impact, and any suggested mitigation so the report can be triaged quickly.