Please do not open a public GitHub issue for security vulnerabilities.

If you discover a security issue, report it privately by emailing michael.lurquin@gmail.com with:

• A description of the vulnerability
• Steps to reproduce it
• The potential impact
• Your suggested fix (if any)

You will receive a response within 72 hours. Once the issue is confirmed, a fix will be released as soon as possible and you will be credited in the release notes (unless you prefer to remain anonymous).