Security Advisory Heads-Up — GHSA-pqf8-542r-76hg

I recently posted security advisory GHSA-pqf8-542r-76hg and wanted to give the team a quick heads-up here as well.

I heard from the developers that advisory submissions may not send notifications, so I’m opening this issue just to make sure it’s visible. No action needed here if you’ve already seen it.