Please do not disclose suspected vulnerabilities in a public issue, discussion, pull request, or commit.

Use GitHub's Private vulnerability reporting option from this repository's Security tab when it is available. Include the affected component and revision, reproduction steps, impact, and any suggested mitigation. If private reporting is unavailable, contact the maintainer through their GitHub profile without publishing exploit details.

The maintainer will acknowledge the report, assess severity and scope, coordinate a fix, and disclose details only after affected users have a reasonable remediation path. Please avoid accessing data that is not yours, disrupting services, or expanding testing beyond what is necessary to demonstrate the issue.

Security fixes are applied to the default branch. Historical revisions and unmaintained forks are not supported unless a release explicitly states otherwise.