Please report security vulnerabilities by opening a private GitHub advisory rather than a public issue.

We aim to respond within 72 hours and will keep you updated as we work on a fix.