Report vulnerabilities privately to [email protected].

Do not open public issues for security vulnerabilities.

See SECURITY.md for the full policy.