Report suspected vulnerabilities through GitHub private vulnerability reporting.

Include the affected version or commit, browser and platform, reproduction steps, and potential impact. Use a minimal, sanitized sample if needed.

Keep vulnerability details private while we investigate and coordinate a fix. Do not include private plans, credentials, or personal data in reports or public issues. Use public issues for ordinary bugs and feature requests.