Please report vulnerabilities privately via repository security reporting features.

• We will acknowledge receipt.
• We will investigate and triage.
• We will coordinate disclosure and fixes.

More details will be added as the project matures.