To report a security vulnerability, please do not open an issue, as this notifies attackers of the vulnerability. Instead, please email [email protected] to disclose.