Do not report vulnerabilities through public GitHub issues.

Use GitHub private vulnerability reporting when it is enabled for this repository. Otherwise, contact the maintainers privately through GitHub before public disclosure. Include affected versions, safe reproduction details, and the expected impact when known.