If you discover a security vulnerability, please report it responsibly:

1. Do not open a public GitHub issue.
2. Email the maintainer directly or use GitHub's private vulnerability reporting.
3. Include a clear description, steps to reproduce, and potential impact.

You can expect an initial response within 72 hours.