This project uses GitHub's private vulnerability reporting.

To report a security issue, go to the repository's Security tab and click Report a vulnerability (under "Advisories"). This opens a private advisory that is only visible to the maintainers.

Please do not open a public issue for security problems. We will review the report and follow up through the private advisory.