Please do not open public issues for security vulnerabilities.

Use the Private Vulnerability Reporting feature on this repository.

I will do my best to respond within 48 hours and coordinate a fix before public disclosure.