Please report security vulnerabilities privately through GitHub's private vulnerability reporting mechanism for this repository. For guidance on submitting a report, see GitHub's Report privately documentation. Do not report security vulnerabilities through public issues, discussions, or pull requests.

Include a description of the issue, steps to reproduce it, affected versions, and any known mitigations or workarounds.

We aim to acknowledge receipt of your report within five business days and work with you through the private report to validate and resolve the issue. If the issue is confirmed as a vulnerability, we will publish a GitHub Security Advisory and acknowledge your contribution. This project follows a 90-day disclosure timeline.