Please report suspected vulnerabilities privately through GitHub Security Advisories. Do not report vulnerabilities in public issues or pull requests.
If GitHub private vulnerability reporting is unavailable, email evangonggyf@gmail.com. Include the affected version or commit, the impact, and steps to reproduce. Do not include real credentials or unrelated private user data.
This project does not promise a response or fix timeframe. Please allow maintainers time to investigate before sharing vulnerability details publicly.