Please report security issues privately by emailing the maintainers.

If you are unsure whether the issue is security-related, open a GitHub issue with minimal details and we will follow up.