If you discover a security vulnerability, please report it privately via GitHub Security Advisory. Do not open a public issue.

You can expect an initial response within 48 hours and a resolution timeline within 7 days.