Report security issues privately to the project owner.

Do not post Discord tokens, logs with account data, private screenshots, or reproduction steps that expose another user.