To report a security vulnerability, please use the private vulnerability reporting form.

This keeps the report confidential until it has been reviewed and addressed. Please do not open a public issue for security vulnerabilities.