Please report security issue privately using GitHub's private security reporting system (https://github.com/joe-brothers/differ/security)

Do not use public issue tracker for security issue

Please give us up to 90 days to remediate the vulnerability before public disclosure.