Please do not disclose suspected vulnerabilities in a public issue.
Report them privately through GitHub's Report a vulnerability facility on this repository. If private vulnerability reporting is not yet available, contact the maintainer through the contact link on the maintainer's GitHub profile and share details only after a private channel is established.
Include affected versions, reproduction steps, impact, and any suggested mitigation. Never include live credentials or personal data in a report.