Please report security vulnerabilities privately via GitHub Security Advisories. Do not open a public issue for a security vulnerability.

We ask that you allow maintainers a reasonable time window to respond before disclosure.