Security Policy Report vulnerabilities privately via GitHub Security Advisories or the contact email in the profile. Avoid opening public issues for undisclosed security problems. We aim to acknowledge reports promptly and work on a fix as soon as possible.