Please do not disclose potential security vulnerabilities in public issues or discussions.
Use GitHub's private vulnerability reporting button when it is available for this repository. The repository owner should enable private vulnerability reporting so sensitive reports have a dedicated channel.
If private reporting is unavailable, do not disclose vulnerability details in public issues, discussions, or pull requests. Instead, open a Q&A Discussion containing no vulnerability details and request a private channel from the maintainers.