Please do not report security issues in public issues, pull requests or discussions.

Report them privately through GitHub instead: open the repository's Security tab and choose Report a vulnerability, or go straight to https://github.com/rtCamp/wp-primitives/security/advisories/new. The report stays visible only to you and the maintainers, and the fix, the release and the advisory are coordinated in that same thread.

Include what you can of:

• the affected class or method and the package version;
• the impact, and the conditions an attacker needs;
• steps or a minimal proof of concept that reproduce it.