Please do not open a public GitHub issue for security vulnerabilities.

Report them privately by emailing the repository owner or by using GitHub's private vulnerability reporting.

Include:

• A description of the vulnerability and its potential impact
• Steps to reproduce
• Any suggested fix, if you have one

You can expect an acknowledgement within a few days and a fix or mitigation as soon as possible.