Use GitHub private vulnerability reporting for suspected security issues.
Please include the affected version, operating system, reproduction steps, and the impact you observed. Do not disclose the issue publicly until a fix or coordinated disclosure plan is available.
Do not include passwords, private keys, access tokens, or sensitive user data in a report.