Security Policy

Use this page to report a suspected vulnerability without disclosing it publicly. Open a private report through GitHub Security Advisories. Do not open an issue or discussion for a security report.

Include the affected version, a minimal reproduction, the potential impact, and any mitigation you have already tested. You will receive an acknowledgement, an investigation update, and coordinated disclosure details through the private advisory.