Do not open public issues for vulnerabilities. Use GitHub's private vulnerability reporting for this repository. If that feature is unavailable, contact the maintainer through the email address on the maintainer's GitHub profile.
Include affected versions, impact, reproduction steps, and a suggested fix when available. Never include signing keys, tokens, or proprietary application bundles.