For vulnerability reporting, severity classification, safe-harbor policy, and the full security architecture, see documentation/security.md.
Please report security vulnerabilities privately via GitHub Security Advisories.
If GitHub is not an option, email jatbas@gmail.com.
Do not open a public issue for security vulnerabilities.