Security Advisory Heads-Up — GHSA-pqf8-542r-76hg

I recently posted security advisory **GHSA-pqf8-542r-76hg** and wanted to give the team a quick heads-up here as well.

I heard from the developers that advisory submissions may not send notifications, so I’m opening this issue just to make sure it’s visible. No action needed here if you’ve already seen it.

Review GHSA-pqf8-542r-76hg and confirm whether the team has already seen the advisory. The issue explicitly says no action is needed if it is visible, and it names no files, tests, or entry points, so a newcomer cannot identify a code change or completion criteria from this issue alone.

Written by the indexing model from the issue text.