Please report suspected vulnerabilities privately instead of opening a public issue.

Email sergey.bakulin.github@gmail.com with:

• the affected version or commit
• steps to reproduce the issue
• the impact you expect
• any suggested mitigation, if you have one

The maintainer will acknowledge reports as soon as practical, investigate the impact, and coordinate disclosure before details are published.