Report security vulnerabilities privately, never in a public issue.

Join our Discord and privately message a maintainer with the details.

Do not publicly disclose the vulnerability until we explicitly give you permission to do so.