Please do not disclose vulnerabilities in public issues. Use GitHub's private security reporting flow for this repository, including a minimal reproduction, affected version, and expected impact where possible.

Poolster is pre-1.0; fixes are released on the default branch until versioned release channels are established.