Please do not open a public GitHub issue for security vulnerabilities.

Instead, email andrei@hasna.com with:

• A description of the vulnerability
• Steps to reproduce
• Potential impact

You can expect a response within 48 hours. We will work with you to understand and resolve the issue before any public disclosure.

• Never include credentials, tokens, or secrets in issue reports
• Do not exploit the vulnerability beyond what is needed to demonstrate it
• Allow reasonable time for a fix before public disclosure