Please do not open a public issue for a security vulnerability.

Report privately using GitHub's private security advisory flow on this repository.

Please include:

• What the vulnerability is and which component it affects.
• Steps to reproduce, or a proof of concept.
• The impact you believe it has.
• The version, branch, or commit you tested.
• Any suggested fix.

You will receive an acknowledgement and assessment. Please allow reasonable time to respond before disclosing publicly.

The project has not cut a tagged release. Security fixes land on dev and flow to main. Watch this repository or track releases when they ship.