Do not disclose suspected vulnerabilities in public issues or discussions. Report them through GitHub private vulnerability reporting or email thanhnhan.lionus@gmail.com.

Include the affected file or revision, impact, reproduction steps, proof of concept when safe, and suggested mitigation. Allow the maintainer time to investigate before public disclosure. No response or remediation timeline is promised.