Please report suspected security vulnerabilities privately through GitHub's private vulnerability reporting.
Do not open a public issue or discuss the vulnerability in a public channel before it has been addressed.
Include enough information for maintainers to reproduce and assess the issue, such as:
- A description of the vulnerability and its potential impact
- Affected versions and configurations
- Steps to reproduce or a proof of concept
- Possible mitigations, if known