Please do not report security vulnerabilities in public issues.

Use GitHub's private vulnerability reporting for this repository when available. If it is unavailable, contact the repository owner through their GitHub profile and include steps to reproduce the issue. Please allow time for a response before public disclosure.

Never include real credentials or personal data in bug reports. Rotate any database credentials that may have been committed or exposed; removing a secret from the latest version does not remove it from Git history.