Please report security vulnerabilities privately through GitHub. Open this repository's Security tab. Click Report a vulnerability in the upper-right corner of that page. Fill out the form and submit your draft security advisory. For more guidance on submitting a report, see GitHub's Report privately documentation. Do not report security vulnerabilities through public issues, discussions, or pull requests.

Include a description of the issue, steps to reproduce it, affected versions, and any known mitigations or workarounds.

We aim to acknowledge receipt of your report within five business days and work with you through the private report to validate and resolve the issue. If the issue is confirmed as a vulnerability, we will publish a GitHub Security Advisory and acknowledge your contribution. This project follows a 90-day disclosure timeline.