Please do not open a public GitHub issue for security vulnerabilities.

Report security issues by emailing the maintainer directly or using GitHub's private vulnerability reporting.

Include as much detail as possible:

• A description of the vulnerability and its potential impact.
• Steps to reproduce or a proof-of-concept.
• Any suggested mitigations.

You will receive a response within 72 hours. If the issue is confirmed, a fix will be released as soon as possible and you will be credited in the changelog (unless you prefer to remain anonymous).