We support the private reporting of potential security vulnerabilities. Please file a private security advisory from the repository's Security tab with a description of the potential vulnerability and reproduction scripts (preferred) or steps, and our developers will review. Please do not open a public issue.