Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately by emailing the maintainers or using GitHub's private vulnerability reporting.

You can expect an acknowledgement within 48 hours and a resolution timeline within 14 days for confirmed vulnerabilities.