To report a security vulnerability, use GitHub's private vulnerability reporting on this repository. Do not open a public issue for security bugs.