Security Policy Report vulnerabilities privately via GitHub Security Advisories. Public issues are for content/editorial discussion only.