Please report security vulnerabilities privately by using the GitHub Security Advisory feature. Do not open issue tickets for sensitive security reports.

We will respond within 72 hours and coordinate disclosure and patches.