Report vulnerabilities to [email protected]. Do not file public GitHub issues for security bugs.

Include steps to reproduce and the version you are running.