Please do not open a public GitHub issue for security vulnerabilities.

Report privately via email: security@willowvibe.dev or via GitHub's private vulnerability reporting.

We aim to respond within 48 hours and release a patch within 7 days.