Do not open a public issue for a suspected vulnerability.

Report it through GitHub private vulnerability reporting. Include the affected command or component, the impact, and the smallest reliable reproduction you can provide.

Until Elene has versioned releases, only the current master branch receives security fixes.