Please do not report security vulnerabilities through public GitHub issues.
Security vulnerabilities should be reported privately through GitHub's private vulnerability reporting/security advisory mechanism.
Please include:
- A description of the vulnerability
- Steps required to reproduce it
- The affected version(s)
- The potential impact
- Any suggested mitigation or remediation
We will investigate reported vulnerabilities and respond as soon as reasonably possible.