Report a suspected vulnerability through GitHub private vulnerability reporting. Do not put credentials, private workloads, internal host details, or an unpatched exploit in a public issue.

Security fixes target the current release line. Performance regressions and unsupported GPU environments are ordinary issues unless they also cross an authorization, integrity, or confidentiality boundary.