Please report security vulnerabilities through GitHub's private vulnerability reporting.

Do not open a public issue for security vulnerabilities.

You can expect an initial response within 72 hours. We will keep you updated on the fix timeline and coordinate disclosure with you before any public release.