Please report security vulnerabilities privately through GitHub's security advisory form for this repository. Do not open a public issue for an undisclosed vulnerability.