Please do not open a public issue for security-sensitive reports.
Use GitHub Security Advisories for this repository if available, or contact the maintainer directly via GitHub profile.
Best-effort triage and validation will be performed, but no formal SLA is guaranteed.