Please use GitHub Security Advisories to report security issues privately. Do not open a public issue for sensitive reports.
If GitHub Security Advisories are unavailable, open a normal issue with a minimal description and note that additional details are available on request.