Please report suspected vulnerabilities privately through GitHub Security Advisories.

Do not include credentials, private model weights, proprietary engine binaries, or other sensitive data in a public issue. Include the affected version, environment, reproduction steps, and impact when safe to do so.

We will acknowledge reports as soon as practical and coordinate remediation and disclosure with the reporter.