If you discover a security vulnerability, please do not open a public issue.
Instead, use GitHub Security Advisories for private disclosure:
- Go to the repository page
- Click "Security" → "Advisories"
- Click "Report a vulnerability"
We will acknowledge receipt and work to validate and remediate the issue.
We support the latest code on the default development branch. Please report any issues against the most recent code.