Please do not report security vulnerabilities in public issues, forum topics or Discord.

Report them privately through GitHub: open the affected repository → Security tab → Report a vulnerability (private vulnerability reporting). Include the version, a description, reproduction steps and the impact you expect.

We'll acknowledge the report, work on a fix, and publish an advisory (also posted in the forum's Security Advisory category) once a fixed release is available.