Please report security vulnerabilities through GitHub Security Advisories.

Do not open a public issue for security vulnerabilities.

We will acknowledge receipt within 48 hours and aim to release a fix promptly.