Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Instead, use GitHub's Private Vulnerability Reporting on the affected repository (Security tab → Report a vulnerability).
Include steps to reproduce, affected versions or commits, and potential impact so maintainers can triage and respond promptly.