Please report security issues privately.

• Email: security@lea.dev (or open a GitHub Security Advisory if available)

We will acknowledge reports within 72 hours and work on a fix as quickly as possible.