If you think you've found a security issue, please don't open a public issue. Instead, open a private security advisory. I'll respond within a week.

Useful info to include:

• What's broken and what the impact is
• Steps to reproduce
• Version, adapter, and embedder you're using