Report vulnerabilities privately through mailto:samzong.lu@gmail.com. Do not open a public issue.

Include the affected version, reproduction steps, and observed impact. Do not include credentials or unrelated personal data.