If you discover a security vulnerability, please report it privately using GitHub's private vulnerability reporting feature on the affected repository (Security tab → Report a vulnerability), rather than opening a public issue.