RESPONSIBLE DISCLOSURE

Report a security issue privately.

Please do not post security vulnerabilities, access keys, exported collections, or other sensitive information in a public issue.

Open a private GitHub advisory

Include the affected URL, impact, reproduction steps, and whether any collection data or credentials may have been exposed. Allow reasonable time to investigate before public disclosure.