Report vulnerabilities through GitHub private vulnerability reporting. Do not open public issues.

Submit a private vulnerability report

Include the affected version, impact, and reproduction steps. Do not include credentials.