Security reports

Report vulnerabilities privately to ghoziankarami@gmail.com. Include the affected commit, reproduction steps, impact, and a suggested fix if available. Do not publish credentials, private data, or an exploit in a public issue before the maintainer has reviewed the report.

This project is maintained on a best-effort basis. Use the current default branch when preparing a report and state which release is affected.