Please do not report security vulnerabilities through public GitHub issues.

Instead, report vulnerabilities privately via GitHub Security Advisories on the main framework repository. Include reproduction steps, affected component or documentation page, and potential impact. We will acknowledge receipt within 48 hours.