Please do not open a public GitHub issue for security reports.

Email ian@allowayllc.com with:

• A short description of the issue and affected component
• Steps to reproduce or a proof of concept, if possible
• Impact summary

You should receive an acknowledgment within a few business days.