Please report suspected security issues through GitHub private vulnerability reporting. Do not include real contributor receipt links, evidence files, or credentials in a public issue.

We will review the report privately, reproduce it, and coordinate a fix before public disclosure. For ordinary bugs or feature requests, use the public issue tracker.