Please report security vulnerabilities privately — do not open a public issue.

Use GitHub's private vulnerability reporting: open the Security tab and click "Report a vulnerability."

We aim to acknowledge reports within a few business days and will keep you updated on remediation.