Report suspected vulnerabilities through GitHub's private vulnerability reporting for the hraness/ui repository. Do not include sensitive details in a public issue.

Security fixes target the latest version tag. Maintainers will coordinate disclosure and publish a new immutable tag when a fix is ready.

Accessibility regressions are usually appropriate for a public issue unless reporting them would disclose a security or privacy problem.