Report vulnerabilities through GitHub private vulnerability reporting for this repository. Do not disclose an unpatched vulnerability in a public issue.

Include the affected component, reproduction steps, impact, and any known mitigation.