Please report suspected vulnerabilities privately through GitHub in the affected Caffeine project's repository. Do not disclose vulnerability details in a public issue, discussion, or pull request.

1. Open the affected repository's Security (or Security and quality) tab.
2. Select Advisories, then Report a vulnerability.
3. Describe the vulnerability, affected versions, potential impact, and steps or a minimal example to reproduce it. Remove credentials and personal data.

GitHub's private vulnerability reporting guide explains the process. If the reporting button is unavailable, ask maintainers to enable private vulnerability reporting without sharing vulnerability details.