Please report security vulnerabilities privately. Do not open a public issue for security concerns.
- For personal projects: email the maintainer listed in the repository.
- For Google projects: follow https://g.co/vulnz.
We aim to acknowledge reports within 5 business days.