Do not open a public GitHub issue or discussion for security problems.

Use GitHub Private vulnerability reporting so the report stays private until a fix is ready.

If you cannot use that form, contact the maintainer privately:

• GitHub: @kaybi-gh

Include steps to reproduce, affected versions, and impact. Do not disclose the issue publicly until a fix is available or you are told it is safe to do so.

Security fixes are applied to the latest release when possible. Older tags may not receive backports.