Open a private advisory via GitHub Security Advisories on this repository. Include: affected version, reproduction steps, and impact assessment. Expected response: acknowledgement within 72 hours, patch timeline within 14 days for confirmed issues.