Please report security vulnerabilities privately, through GitHub:
- Go to the Security tab of this repository
- Choose Report a vulnerability
- Describe the issue, the impact, and how to reproduce it
Do not open a public issue for a security problem. Public issues are visible to everyone, including before a fix exists.
You can expect an initial response within a week. If the report is confirmed we will agree a disclosure timeline with you before publishing anything.