# Security Policy

## Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

If you believe you have found a security vulnerability, please report it privately using GitHub's private vulnerability reporting feature for this repository.

If private vulnerability reporting is not available, contact the maintainers through the repository owner and include:

- Affected repository and version or commit SHA
- Steps to reproduce the issue
- Potential impact
- Any suggested mitigation, if known

We will acknowledge valid reports as soon as possible and coordinate a fix and disclosure timeline based on severity.
