Do not open a public issue for an unpatched vulnerability or include secrets/exploit details in public discussions.

If GitHub Private Vulnerability Reporting is enabled for this repository, use Security → Advisories → Report a vulnerability. Otherwise, contact the repository maintainers through the private security channel documented by the project.

Include the affected version/commit, impact, reproduction details, and any proposed mitigation. Do not test against systems or data you do not have permission to access.