Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately using one of the following:

• GitHub Private Security Advisory (Security tab → "Report a vulnerability")
• Email: arceusthe@gmail.com

Please include a description of the vulnerability, steps to reproduce, the affected version, and impact assessment if possible.

I will acknowledge receipt within 72 hours and aim to release a fix within 90 days. Public disclosure will be coordinated with the reporter. If the vulnerability cannot be confirmed and the opener does not respond within 90 days, your advisory may be automatically closed.