If you discover a security vulnerability in this project, please do not open a public issue.

Instead, use GitHub's private vulnerability reporting:

1. Open the Security tab of this repository
2. Click Report a vulnerability
3. Fill in the advisory details

We aim to acknowledge reports within 48 hours and will work on a fix as quickly as possible. Once a fix is released, we will publish a security advisory crediting the reporter (unless anonymity is requested).