Use GitHub's private vulnerability reporting for this repository: https://github.com/wildsurfer/your-mail-mcp/security/advisories/new

The report stays private until a fix is released. Please do not open a public issue for a security problem.

The threat model and what the process cannot do are described in the Security section of the README.