Do not open a public issue for a vulnerability that could expose local files, embedded personal information, command execution, or unsafe URL handling.

Use GitHub's private vulnerability reporting feature for this repository when available. Include a minimal reproduction, affected version, impact, and any suggested mitigation. Please avoid including real resumes, portraits, credentials, or other personal data in the report.

Security fixes target the latest published release and the current main branch.