If you discover a security vulnerability, please report it privately by opening an issue and prefacing the title with "SECURITY:" or by contacting the repository owner.

Do not disclose vulnerabilities publicly until they have been addressed.