Please do not open a public GitHub issue for security vulnerabilities.
Instead, report them privately via GitHub's private vulnerability reporting.
Include as much detail as possible:
- A description of the vulnerability
- Steps to reproduce
- Potential impact
You will receive a response within 48 hours.