If you find a security issue, please report it privately via GitHub Security Advisories instead of opening a public issue. We'll respond as quickly as we can.