Report vulnerabilities privately through GitHub Security Advisories for this repository. Include the affected release tag, target platform, runtime metadata, and reproduction details.

Do not include secrets, private media, or unrelated personal data in reports. Upstream vulnerabilities in mpv or LibreMPEG may also need coordinated reports to the relevant upstream project.