Please do not report security vulnerabilities via public GitHub issues.

Use GitHub private vulnerability reporting for this repository, or contact the maintainer privately if GitHub reporting is unavailable.

Please include:

• affected pdfcpu version / commit
• operating system and architecture
• command or API entry point
• minimal reproducer if possible
• input file if it can be shared
• observed impact
• whether the issue is already public

The project will acknowledge reports as soon as reasonably possible and coordinate disclosure through a GitHub Security Advisory when appropriate.