Please report vulnerabilities privately through GitHub's Report a vulnerability feature rather than a public issue. Include reproduction steps, affected versions, and impact where possible. Do not include real credentials or private target data.

Security reports about private-network access, unsafe redirects, unbounded responses, TLS verification, command injection, or sensitive-data leakage are especially useful.