Report vulnerabilities privately through GitHub Private Vulnerability Reporting. Do not disclose security details in public issues or discussions. Include affected versions, environment, reproduction steps and impact, without credentials or private script contents. This also covers the embedded Library and Updater. Use issues for ordinary bugs.