Please do not file a public GitHub issue for security vulnerabilities.

Instead, use GitHub Security Advisories to report a vulnerability privately.

We will respond within 48 hours and aim to release a fix within 7 days for critical issues.