Please do not open a public GitHub issue for security vulnerabilities — doing so exposes the details before a fix is available.

Use GitHub Private Vulnerability Reporting to report a vulnerability privately. You will receive a response within 72 hours.

If the private reporting form is unavailable, contact the maintainer directly via the email listed on the GitHub profile.