Report vulnerabilities privately through GitHub's "Report a vulnerability" button on this repo's Security tab, or email Ryan Yannelli at ryanyannelli@gmail.com. Don't open public issues, discussions, or pull requests for security problems.

Include:

• The affected version or commit
• Steps to reproduce
• The security impact and how an attacker could use it
• A proof of concept or minimal example, if you have one (remove credentials and personal data)

I'll acknowledge reports within 48 hours and keep you updated until a fix ships. Fixes are released as patch versions and announced in GitHub releases.