Report vulnerabilities privately through GitHub's security advisory flow for this repository. Do not open a public issue containing credentials, customer data, or exploit details.

Supported security fixes are released for the latest published 0.x line. Never include Organization API Keys, User API Keys, Authorization headers, or plaintext create/rotate responses in bug reports, logs, fixtures, or examples.