Please do not open a public issue for sensitive security problems.

Use a private maintainer contact path for responsible disclosure.