Report a vulnerability privately through GitHub's private vulnerability reporting for this repository. Do not open a public issue.

Include the affected component (gateway, pipeline, web, bridge, CLI), the version or commit, and steps to reproduce. You will get an acknowledgement within a few days and a fix or mitigation plan once the report is confirmed.

Only the main branch is supported.