Do not open a public GitHub issue for security vulnerabilities.

Please report vulnerabilities using GitHub Private Vulnerability Reporting.

Include a description of the issue, steps to reproduce, and the potential impact. You'll receive a response within 7 days acknowledging the report, and a fix or mitigation plan within 30 days.