Do not disclose exploitable vulnerabilities publicly. Use GitHub private vulnerability reporting and include the affected version, impact, reproduction details, and possible mitigation.