Security fixes are prepared for the current v0.1.0-beta.1 beta line.
Use Report a vulnerability on the repository's GitHub Security page. Do not disclose the report in a public issue.
GitHub private vulnerability reporting must be enabled before the beta is published. If that control is not visible, wait for it to be enabled rather than opening a public report.