Do not open a public issue. Report vulnerabilities privately through GitHub Security Advisories.

Please include:

• the affected contract(s) and version or commit,
• a description of the issue and its impact,
• steps or a test case that reproduces it.

We will acknowledge the report, keep you informed while we investigate, and credit you in the advisory unless you prefer otherwise.

See docs/audits.