Do not post security vulnerabilities, credentials, API keys, tokens, or private source documents in public issues.

If GitHub private vulnerability reporting is enabled for this repository, use it. Otherwise, contact the repository owner through a GitHub profile channel and disclose only the minimum information needed to establish a safe reporting path. Never include a live credential in a report.