To report a security vulnerability, please use GitHub's private vulnerability reporting (Security tab -> "Report a vulnerability") rather than opening a public issue. This ensures the report is only visible to the repo owner until a fix is ready.