Please do not open a public GitHub issue for security vulnerabilities.

Instead, use GitHub’s private reporting:

• Go to the repository’s Security tab
• Click Report a vulnerability

If you can’t use GitHub private reporting, open an issue and only describe how to contact you (no details). We’ll follow up to continue privately.

Security fixes are provided for the latest released version.