Report vulnerabilities privately through this repository's GitHub Security tab using Report a vulnerability. If that option is unavailable, open an issue requesting a private contact channel without including sensitive details.

Do not include credentials, signed model URLs, customer scenes, cookies, authorization headers or exploit details in public issues. Include the plugin version, affected platform/component and sanitized reproduction steps in the private report. Repository maintainers triage reports; no response-time commitment is established for this preview.