Please report suspected security issues privately instead of opening a public issue.

Use GitHub private vulnerability reporting if it is enabled for the repository, or contact the maintainers privately through the project's normal support channel.

Include:

• Affected version or commit.
• Platform and architecture.
• Steps to reproduce.
• Impact and any known workaround.

We will acknowledge reports as quickly as possible and coordinate a fix before public disclosure when appropriate.