Please report security vulnerabilities privately through the repository's Security tab using Report a vulnerability. Do not disclose a vulnerability in a public GitHub issue.
See the Block Open Source Security Policy for the reporting and disclosure guidelines.