Please do not open a public GitHub Issue for a suspected security vulnerability.

Use GitHub's private vulnerability reporting feature for the affected repository when it is available. Include:

• affected repository and version or commit
• a concise impact description
• reproducible steps or proof of concept
• any suggested mitigation

If private reporting is not enabled for the repository, contact the organization maintainers through the contact details available on the relevant repository or organization profile. Do not include credentials, access tokens, or production data in a report.

Reports are evaluated for Theorvane-maintained public repositories. We prioritize reproducible issues affecting the currently published or deployed surface.