Please report security vulnerabilities privately via GitHub's private vulnerability reporting so the issue can be triaged and patched before public disclosure. Do not open a public issue for security reports.