The Vibrato team takes security issues seriously. If you discover a security vulnerability in this project, please report it privately:

1. GitHub Private Vulnerability Reporting (Recommended):
   Navigate to the Security Advisories tab in this repository and click "Report a vulnerability". This allows us to review and fix the issue before public disclosure.

2. Email:
   If you cannot use GitHub Security Advisories, please contact the maintainers directly.

• A clear description of the vulnerability.
• Steps to reproduce or proof-of-concept (PoC) code.
• Potential impact and attack scenarios.
• Suggested mitigation (if any).

We will acknowledge receipt within 48 hours and work with you on a resolution and coordinated public disclosure.