Open a security advisory via GitHub's private reporting:

1. Go to Security → Advisories → Report a vulnerability
2. Or email 687434+mainlink0435@users.noreply.github.com

Include a clear description, steps to reproduce, and potential impact.

Only the latest commit on main is supported. No backports.

• Acknowledged within 5 business days
• Fix timeline depends on severity
• Public disclosure after fix is released