Please do not report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private vulnerability reporting to report it privately. You can expect a response within 72 hours acknowledging the report, and we will work with you to understand and resolve the issue as quickly as possible.

When reporting, please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce the issue
• Any suggested mitigations or fixes, if known