Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository, or contact the repository owner privately.

Include affected versions, impact, reproduction steps, and any known mitigation. You should receive an acknowledgement within five business days.