Potential security issue disclosure

I found a potential security issue in this project. As there is no security policy defined, I’m reporting it here. Please let me know if there is a preferred way to report security-related issues.

No file, test, or entry point is named, and the issue does not specify a documentation change. Start by reviewing the issue context and confirming the maintainers’ preferred security-reporting process; done requires an explicit, maintainer-approved reporting path or policy.

Written by the indexing model from the issue text.