Please do not disclose suspected vulnerabilities, privacy concerns, credentials, student information, or operational details in a public issue or discussion.
Use GitHub private vulnerability reporting to open a private report with the repository maintainers. Include only the minimum information needed to reproduce and assess the concern, and use synthetic or de-identified examples whenever possible.
If private vulnerability reporting is unavailable, contact the repository owners through an organization-approved private channel before sharing details. Do not send sensitive material to an unverified address.