If you find a security vulnerability, please do not open a public issue. Report it privately using GitHub's "Report a vulnerability" feature on the repository's Security tab.
Please include steps to reproduce and the affected version. You can expect an acknowledgement and a fix or mitigation plan as soon as practical.