Please do not disclose security vulnerabilities in public issues. Use GitHub's private security advisory form. Include the affected version, platform, reproduction steps, and any relevant logs. We will acknowledge reports as soon as practical.