Please report security issues privately to the maintainer rather than opening a public issue. Include reproduction steps, affected versions, and any suggested mitigation. Do not include sensitive research data in reports.