If you discover a security vulnerability, please open a private security advisory or contact the maintainers.

Please do not disclose vulnerabilities publicly before they are fixed.