If you discover a vulnerability, please email the maintainers listed in MAINTAINERS.md and do not open a public issue. We aim to respond within five business days. When reporting, include steps to reproduce and any potential impact.