SequenceState is not cryptographic. It does not provide authentication, tamper resistance, confidentiality or cryptographic integrity, and its states must not be used as security proofs or replacement for a cryptographic hash/MAC.
To report a vulnerability in the implementation, open a private GitHub security advisory if that feature is enabled for the repository. Otherwise open a GitHub issue without publishing sensitive details and request private coordination.
Please include the affected version, platform, compiler and a minimal reproducer. Do not include secrets or private data in a public issue.