Do not create a public issue for a suspected vulnerability. Use GitHub's Report a vulnerability flow for DBZDrums/dbzdrums-notation, including the affected version, reproduction steps, impact, and any suggested mitigation.

The maintainers will acknowledge a valid report, assess impact, and coordinate a fix and disclosure timeline with the reporter.