Please report suspected vulnerabilities privately through GitHub's security advisory feature rather than opening a public issue. Include affected versions, reproduction steps, impact, and any suggested mitigation.

The maintainers will acknowledge a report, investigate it, and coordinate disclosure and a release when the issue is confirmed.