Please do not report security vulnerabilities in public issues, pull requests or discussions.

Report them privately through GitHub instead: report a vulnerability, or open the repository's Security tab and choose Report a vulnerability.

Include what is affected, how to reproduce it, and the impact you expect. The report is visible only to you and the maintainers until a fix is published.