Security Disclosure.

Responsible disclosure

Send security findings privately to [email protected], with affected version, reproduction steps and potential impact. Do not include customer secrets.

The owner must designate a monitored security contact, response expectations and a vulnerability-handling policy before production launch. No bug-bounty program is promised.