Please do not report security vulnerabilities via public GitHub Issues.

Report it privately through GitHub, by opening a draft security advisory, or send an email to [email protected]. Either way, include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact and affected versions

We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.

Once the fix is released, we will credit you in the release notes unless you prefer to remain anonymous.