Report security issues privately via a GitHub Security Advisory.

Do not open a public issue for security vulnerabilities. Include a description of the issue, steps to reproduce, and relevant environment details.