Please do not open a public issue for security vulnerabilities.
Instead, report them directly via GitHub's private vulnerability reporting.
Include:
- A description of the vulnerability
- Steps to reproduce
- Potential impact
I'll respond as quickly as possible.