Please report vulnerabilities privately to the repository maintainers. Do not include secrets in reports. Contract values are redacted by default.