If you discover a security issue, do not open a public issue.

Please contact the maintainer privately and include:

• A short description of the issue
• Impact and affected area
• Reproduction steps or a minimal proof of concept
• Any suggested remediation

Security fixes will be reviewed privately and disclosed after a patch is ready.