Report vulnerabilities privately through GitHub's "Report a vulnerability" button on this repository. Do not open a public issue.

We acknowledge reports within three working days and publish a fix and advisory once a patched release is available.