Please do not open public issues for sensitive vulnerabilities.

If GitHub private vulnerability reporting is enabled for this repository, use that first. Otherwise, contact the maintainer privately with:

• Affected version or commit
• Steps to reproduce
• Impact
• Suggested fix, if you have one

Do not include live secrets, private database dumps, or credentials in reports.