Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities privately via GitHub Security Advisories.

Include:

• A description of the vulnerability and its impact
• Steps to reproduce
• Any suggested fix if you have one

You will receive a response within 48 hours. If confirmed, a fix will be released as soon as possible and you will be credited in the release notes.