Please report a vulnerability privately through GitHub's private vulnerability reporting or by email to [email protected]. Do not open a public issue.

We will acknowledge the report, investigate, and publish a fixed release before disclosing it.