Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately using one of the following:

• GitHub Private Security Advisory (Security tab → "Report a vulnerability")
• Email: arceusthe@gmail.com

Please include a description of the vulnerability, steps to reproduce, the affected version, and impact assessment if possible.

I will acknowledge receipt within 72 hours and aim to release a fix within 90 days. Public disclosure will be coordinated with the reporter.