Please do not open public issues for suspected security vulnerabilities.

Report privately to the maintainer with:

• Affected module(s)
• Reproduction steps or proof of concept
• Impact assessment
• Suggested remediation (if available)

Acknowledgement and triage will happen as quickly as possible.