To report a security vulnerability, use GitHub private security advisories.

Please do not open a public issue for security problems, and do not include live credentials, tokens, or customer data in any report.