Please do not open public issues for security vulnerabilities.
Instead, report vulnerabilities privately to project maintainers with:
- Description of the issue
- Reproduction steps
- Potential impact
- Suggested fix (if available)
Maintainers will acknowledge reports as soon as possible and work on a fix based on severity and reproducibility.
After a fix is available, maintainers may publish a security advisory and credit reporters who choose to be acknowledged.