Please report suspected vulnerabilities privately through the repository's Security tab using Report a vulnerability. Do not open a public issue before a fix or mitigation is available.

Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. You will receive an acknowledgement as soon as the maintainer is able to review the report.