Do not include credentials, private source material or production data in an issue.

Report a vulnerability through GitHub private vulnerability reporting. Include the affected file, the practical impact and the smallest reproducible example that does not expose secrets.