Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately via GitHub Security Advisories.

We will acknowledge your report within 48 hours and aim to release a fix within 7 days for critical issues.