Security Policy Please report security-sensitive issues privately to the maintainer before opening a public issue. Malformed-input handling should continue to be exercised by negative tests and fuzzing.