If you believe you have found a vulnerability, please email [email protected]. We will acknowledge receipt in 72 hours, and aim to provide a remediation timeline after triage.

Please do not open a public issue for security reports.