Please do not open a public GitHub issue for security vulnerabilities.

Instead, use GitHub's private security advisory feature to report the issue confidentially.

We aim to acknowledge reports within 48 hours and will keep you updated as we investigate and resolve the issue.