Security

Security disclosure

Please report security issues privately with clear reproduction and impact details.

How to report

• Use the contact from /.well-known/security.txt.
• Do not post active exploit details in public channels.
• Include affected endpoint/path, steps, impact, and mitigation suggestion.