Report vulnerabilities privately via GitHub Security Advisories on this repo. Initial response within 5 business days. Coordinated disclosure within 90 days.

Do not open public issues for security reports.