Please avoid publishing suspected security vulnerabilities in public issue trackers before maintainers have had an opportunity to assess them.
When a private reporting channel is available, use that channel and include:
- A clear description of the issue
- Affected versions or commits
- Steps to reproduce the issue
- Potential impact
- Any proposed mitigation, if available