请通过本仓 GitHub 私密漏洞报告提交问题：Report a vulnerability。请勿在公开 Issue 中贴出真实令牌、密钥、个人资料、线上会话内容或完整攻击凭据。

请提供受影响版本、最小复现、影响范围和经过脱敏的日志。只在你有权测试的环境验证；不要为复现调用真实用户账户或收费资源。不要发送密码、私钥或生产数据库备份。

Please use GitHub's private vulnerability reporting link above. Include affected versions, a minimal reproduction, impact and redacted logs. Never post secrets or personal data in public issues. Test only in an authorized environment. Security fixes are considered against the current supported demo/dependency versions; this repository does not promise a response-time SLA.