Please report vulnerabilities privately with the Report a vulnerability button on this repository's Security tab. Do not open a public issue. We aim to acknowledge reports within three working days.