Please do not report security vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting for this repository, or contact the maintainers privately through the GitHub profile for @phcodesage. Include the affected version, a clear description, reproduction steps, and any suggested mitigation.

We will acknowledge reports as soon as practical and coordinate a fix and disclosure timeline with the reporter.