Please report suspected vulnerabilities privately via GitHub's private vulnerability reporting on the affected repository (Security → Report a vulnerability). Do not open a public issue for a security problem.

We aim to acknowledge reports within a week. Supported versions: the latest release of each public repository.