Do not include Steam Web API keys, account identifiers, or other private data in a public issue. Use the repository's private security advisory feature to report a vulnerability.

Include the affected version, reproduction steps, expected behavior, and impact. Security reports will be acknowledged as soon as reasonably possible.

Security fixes are provided for the latest published version.