Please do not report vulnerabilities in public issues or pull requests.

Report them privately through GitHub: open the repository's Security tab and choose Report a vulnerability. Include the affected commit, the steps to reproduce, and the impact you expect.

GitHearth is experimental and has no supported release yet, so fixes land on main.