Do not open a public issue for a suspected vulnerability or exposed sensitive data. Report it privately through GitHub's private vulnerability reporting for this repository.

Include the affected component, reproduction steps, impact, and any suggested mitigation. Maintainers will acknowledge a complete report as soon as practical.