Please do not report security vulnerabilities in public issues.

Use one of the following private channels:

1. GitHub Security Advisories (preferred): open the repository Security tab and choose "Report a vulnerability".
2. If advisories are unavailable, contact the maintainer privately on GitHub (@KonkovDV) with the details.

Include:

• affected component and version
• reproduction steps or proof of concept
• impact assessment
• suggested mitigation (if known)

Target response times:

• acknowledgement: within 72 hours
• triage decision: within 14 days
• coordinated fix timeline: shared after triage