Please do not report security vulnerabilities through public GitHub issues.

Instead, report them via GitHub's Private vulnerability reporting feature. This creates a private discussion with the maintainers so the issue can be assessed and fixed before public disclosure.

Please include as much of the following as you can:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof-of-concept
• The affected version(s)

We will acknowledge your report and keep you updated as we work on a fix.