Use Security → Report a vulnerability in this GitHub repository. Do not open a public issue for vulnerabilities, leaked credentials, private URLs, or personal data.

Include the affected version, impact, minimal reproduction, and a suggested correction if available. Redact credentials and personal data; use synthetic placeholders instead of real secrets.

Only the current release receives security fixes. Reports are reviewed privately before any public disclosure or repository change.