Please do not report suspected vulnerabilities in a public issue. Use the repository's Security tab to open a private vulnerability report. If that option is unavailable, contact @jlapenna privately before disclosing details.

Reports should include the affected version or commit, reproduction steps, impact, and any proposed mitigation. Please redact access tokens and private network details.