To report a vulnerability: email bvasilenko directly or open a private GitHub advisory on this repository.

Do not post vulnerability details in public issues.