Please do not open a public issue, discussion, or pull request for security problems.
Instead, open a private security advisory on this repository.
Useful information to include:
- A description of the issue and where it lives (file, commit, or URL)
- Steps to reproduce
- Impact assessment, if you have one
- Any patch or proof-of-concept
We use coordinated disclosure: please give us a reasonable opportunity to ship a fix before publishing details.