Please report suspected security vulnerabilities privately through GitHub Security Advisories.

Include a description of the vulnerability, affected versions or commits, steps to reproduce, and the potential impact.

Please do not disclose vulnerabilities in public issues or pull requests. Use the private advisory to discuss the report and coordinate disclosure.