Found a vulnerability? Please report it privately through GitHub's Report a vulnerability form, or message a maintainer on Discord and ask for a private channel.

Please don't open a public issue until it's fixed. We'll acknowledge reports as quickly as we can.