Please do not report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private vulnerability reporting feature or contact us at:

me@tonivade.es

Please include:

• Description
• Steps to reproduce
• Affected version
• Proof of concept (if available)

We aim to:

• Acknowledge reports within 3 business days
• Assess the report within 7 business days
• Keep reporters informed throughout the investigation

Please allow us reasonable time to investigate and release a fix before publicly disclosing the issue.

We appreciate responsible disclosure and, with your permission, will acknowledge your contribution in the related security advisory.