Please do not open a public GitHub issue for security reports.

Email the maintainer listed in pyproject.toml / GitHub profile (@bugkira), or use GitHub's private vulnerability reporting on this repository (Security → Advisories → New draft advisory) once the repo is public.

Include: affected version / commit, environment (OS, CUDA, torch), and a minimal reproduction. We will acknowledge within a few days and coordinate a fix before any public disclosure.