Please report vulnerabilities through GitHub's private vulnerability form. Do not include credentials, private MCP URLs, captured dashboard data, or exploit details in a public issue.

Include the affected commit or release, the impact, reproduction steps, and any suggested fix. Only the latest release and main receive security fixes.