Report vulnerabilities privately via GitHub Security Advisories on this repository. Do not open a public issue for security reports.

Reports are reviewed as soon as practical. Valid issues get a private advisory and a fix release when needed.