Please do not open a public issue for a suspected vulnerability.
Use GitHub's private vulnerability reporting feature in the repository's Security tab. Include the affected version, impact, and a minimal reproduction when possible.
Maintainers provide security fixes for the latest major release of this action.