Please report security issues privately through this repository's GitHub Security Advisories: the Security tab → Report a vulnerability. Do not open a public issue for a security report.

We will acknowledge the report and work with you on a fix and coordinated disclosure.