Do not put access tokens, passwords, personal paths, full memory dumps or unredacted logs in a public issue.

If GitHub offers Report a vulnerability in this repository's Security tab, use it for a private report. Otherwise open a minimal issue asking the maintainer for a private reporting channel, without disclosing the vulnerability or sensitive attachments.

Include the affected build, impact and reproduction steps in the private report. Remove unrelated personal information before sharing diagnostics. Rotate any exposed credentials immediately.