Do not report vulnerabilities in public issues.

Email security@raintree.technology with the affected repository, reproduction steps, impact, and suggested mitigation. Allow time for investigation and remediation before public disclosure.