Please report suspected vulnerabilities privately, not in a public issue or pull request.

Use GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability. If that is unavailable, contact the maintainer through the channel listed on their GitHub profile.

Please include:

• the affected version, commit, or file;
• a minimal reproduction or proof of concept;
• the impact you believe it has.

This educational project does not maintain parallel release lines. Security fixes target the latest commit on main; older commits and forks are not supported versions.

This project is maintained on a best-effort basis. No response time, acknowledgement, remediation, or fix is guaranteed, and no timeline or ETA is committed. Reports are reviewed as time allows.

Please give a reasonable private window before disclosing publicly. This is a request made in good faith, not an obligation owed in return, and it does not imply any commitment on the maintainer's part.

Security testing must be limited to code, data, and systems you own or are explicitly authorized to assess. The published demonstrations use synthetic data in the browser and do not require access to any external target. Do not test the techniques against third-party services, production systems, or accounts that are not yours.