Security Policy Please report vulnerabilities privately. Reporting Open a private GitHub security advisory when possible. Include affected repositories, reproduction details, and impact. Public issues for unpatched vulnerabilities may be closed without discussion.