If you believe you’ve found a vulnerability, please email [email protected] and open a GitHub Security Advisory (not a public issue). We aim to acknowledge within 48 hours.