Please do not report security vulnerabilities in public issues or pull requests. Use GitHub's private vulnerability reporting for this repository when it is available. Otherwise, contact the repository maintainers through the repository's private security contact.
Include the affected version, a description of the impact, reproduction steps, and any suggested mitigation. Please allow maintainers reasonable time to investigate before public disclosure.