Do not open a public issue containing credentials or an unsafe cassette.

Report vulnerabilities privately through GitHub Security Advisories. Include the smallest reproduction that does not expose real secrets.