Please do not report security vulnerabilities through public GitHub issues.
Send a private vulnerability report through GitHub's Security tab using Report a vulnerability. Include reproduction steps, affected versions, and the potential impact when possible.
You can expect an acknowledgement within seven days. Please allow time for a fix before publicly disclosing the issue.
Only the latest version on the default branch is currently supported.