Hello,

I have identified several security vulnerabilities in this project through source code review and would like to report them responsibly.

The findings include issues with CVSS scores ranging from 6.5 to 8.8 (High severity). I have not published any details publicly and am following a 90-day coordinated disclosure timeline.

To receive the full private report, please either:

1. Enable Private Vulnerability Reporting on this repository (Settings → Security → Private vulnerability reporting) — I can then submit directly
2. Reply to this issue with a preferred private contact email

Researcher: Alisher Umetaliyev
Contact: bbcec2010@gmail.com

I will follow up in 14 days if no response is received.