Please do not disclose exploitable vulnerabilities in a public issue.
Use GitHub's private vulnerability reporting feature when it is available for this repository. If private reporting is unavailable, contact the maintainer through the contact method listed on the GitHub profile and include:
- affected version or commit;
- reproduction steps;
- expected impact;
- a minimal proof of concept when appropriate.
Please avoid accessing data that is not yours, causing service disruption, or publishing secrets while testing.
Supported security fixes target the latest release and the current master branch.