Please do not disclose suspected vulnerabilities in public issues. Send a concise report with reproduction steps and impact to the repository maintainer through GitHub's private contact options. We will acknowledge valid reports and work toward a fix.