If you believe that you have found a security vulnerability in this project, please report it privately rather than opening a public GitHub issue.

Please use GitHub's Private Vulnerability Reporting feature to submit a report. If private reporting is unavailable for this repository, please contact the project maintainers through the contact information provided in the repository.

When reporting a vulnerability, please include:

A description of the vulnerability and its potential impact. The affected version(s). Clear steps to reproduce the issue. A proof of concept, if available. Any suggested mitigation or fix, if you have one. What to Expect

We will try to acknowledge vulnerability reports as soon as possible and will provide updates as the investigation progresses.

After reviewing a report, we will determine whether it represents a security vulnerability affecting the project.

If accepted: We will work on a fix and coordinate disclosure where appropriate. A security advisory may be published once a fix or mitigation is available. If declined: We will explain, where reasonably possible, why the report does not qualify as a security vulnerability or does not affect the project. If more information is needed: We may ask for additional details or a proof of concept before making a determination.

Please allow maintainers reasonable time to investigate and address a vulnerability before publicly disclosing it.

We appreciate responsible disclosure and thank everyone who helps improve the security of this project.