Security disclosure: request for a private reporting channel

Hi maintainers,

I believe I have identified a potential security issue in this project. I did not find an enabled Private Vulnerability Reporting option or a security contact/policy in this repository, so I am opening this issue only as a contact request — no vulnerability details are included here.

Could you please let me know the preferred private channel (for example a security email address, a draft security advisory, or your disclosure process) where I can share reproduction steps and impact details?

Thank you.