To report a vulnerability, you can open a GitHub Security Advisory. We will try to respond within 48 hours. If we decide to accept your vulnerability, it will be published and you will get credit for finding it. If not, we will explain why.