Please do not open public issues for security vulnerabilities.
Report suspected vulnerabilities privately to the project maintainers with:
- A clear description of the issue
- Steps to reproduce
- Potential impact
- Any suggested remediation
- Initial acknowledgement: within 7 days
- Triage and next steps: within 14 days