Do not disclose suspected vulnerabilities through public issues. Email [email protected] with the subject accessibility-regression-audit security report and include affected versions, reproduction steps, and impact.