If you discover a security issue, do not open a public issue first.
Report privately using GitHub Security Advisories:
Include:
- A clear description of the issue
- Reproduction steps or proof of concept
- Impact assessment
- Suggested remediation (if available)
We will acknowledge receipt as quickly as possible and provide status updates until resolution.
Security fixes are prioritized for the latest release line.