Report vulnerabilities to [email protected].

Do not open public issues for security vulnerabilities.

We will acknowledge receipt within 48 hours and provide a timeline for a fix.