请通过 GitHub 的 Security → Report a vulnerability 私密报告安全问题， 不要创建公开 Issue。报告中请包含影响范围、复现步骤和建议修复方式。

Please report vulnerabilities privately through GitHub Security → Report a vulnerability instead of opening a public issue. Include the impact, reproduction steps, and a suggested fix when possible.