Report suspected vulnerabilities privately to chris@stacksjs.com or use GitHub private vulnerability reporting on this repository.

Include the affected revision, reproduction steps, impact, and verification limits. Keep sensitive details private while a fix is being coordinated.