To report a security issue, please use the "Report a vulnerability" button under the Security tab.
Make sure to include:
- description of the vulnerability
- steps to reproduce
- potential impact
- any potential mitigations you have identified
Please DO NOT:
- open a public issue
- open a public Pull Request
Give me a few days to reply.
If you have a potential patch for the vulnerability, wait for me to set up a private fork to work on.