Please do not report security vulnerabilities through public GitHub issues.

Send a description of the vulnerability to: mathieu@grzybek.fr

Include:

• A description of the vulnerability and its potential impact.
• Steps to reproduce or a proof-of-concept.
• Any suggested remediation, if known.

You will receive an acknowledgement within 48 hours and a status update within 7 days. We aim to release a fix within 30 days for critical issues.

Once a fix is released, we will publicly disclose the vulnerability in a GitHub Security Advisory.