Please do not open a public GitHub issue for security vulnerabilities. Use a private channel instead:

1. GitHub's private vulnerability reporting for this repository, or
2. Email security@sero.ai with the subject [Sero Security].

Include a clear description, impact, reproduction steps, and the commit or release you tested.

Do not include raw API keys, OAuth tokens, full auth files, screenshots exposing secrets, or private local paths in public GitHub artifacts.