Do not report security vulnerabilities in public issues.

Use this repository's Security tab to report a vulnerability privately. Include a description, reproduction steps, and affected versions. Do not attach diagnostic archives until the security team asks for them.