Report vulnerabilities by opening a GitHub Issue on this repository.
Do not post raw secret values or sensitive data in public issues.
Initial acknowledgment within 72 hours.
We follow coordinated disclosure. Please allow reasonable time for fixes before public disclosure.