Please do not open public issues for suspected security vulnerabilities.

Report security issues by contacting the project maintainer privately with:

• Affected version or commit.
• Reproduction steps.
• Impact assessment.
• Suggested mitigation, if known.

Do not include secrets, production data, or credentials in reports.