If you find a security vulnerability in this repository, do not open a public issue.

Report it privately:

1. Open a private advisory on GitHub: Security → Report a vulnerability, or
2. Use the account-level reporting channel described in the account .github SECURITY.md.

You should receive a response within 48 hours. Please do not disclose the issue publicly until a fix has shipped.

• This repository (including its docs and example code)
• Research/CTF material in this repository

Out of scope: forks of third-party projects (report upstream), and public vulnerability-disclosure programs (use the program's own channels).