Do not open a public GitHub issue for security vulnerabilities.

Please report security vulnerabilities via:

1. GitHub Private Vulnerability Reporting (preferred)
2. Email: security@burnless.dev

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if you have one)

We aim to acknowledge reports within 48 hours and provide a fix within 14 days for critical issues.