If you discover a security issue, please open a private security advisory on GitHub:
Please include:
- A clear description of the vulnerability
- Steps to reproduce
- A proof-of-concept if possible
- Potential impact
- We will acknowledge valid reports as soon as possible.
- We will investigate and coordinate a fix and disclosure timeline.