Do not report vulnerabilities in public issues.
Use GitHub's private vulnerability reporting for this repository. Include the affected Feature version, base image, reproduction steps, and impact. Maintainers will acknowledge a complete report within five business days and coordinate remediation and disclosure.
Only the latest Feature major version receives security updates.