Please report vulnerabilities privately via GitHub: Security → Report a vulnerability on this repository (private vulnerability reporting).

Do not open public issues for security problems. We aim to acknowledge reports within 72 hours. Only the latest published version of each package is supported with security fixes.