Please don't open a public issue for a security problem. Report a vulnerability privately through GitHub's private vulnerability reporting on this repository. Include what you found, how to reproduce it, and what an attacker could do with it.

We'll acknowledge your report, keep you informed while we work on a fix, and credit you when it is released unless you prefer otherwise.