See [skegdb/.github/SECURITY.md](https://github.com/skegdb/.github/blob/main/SECURITY.md)
for the organization-wide policy.
Short version: **do NOT open a public issue with exploit details.**
Open a brief "Security" issue here saying you have a finding and the
maintainer will move the conversation to a private channel.
A dedicated `security@` mailbox will be activated in the coming days;
until then, the GitHub issue tracker is the only entry point.