Please do not report security vulnerabilities through public GitHub issues.

Report them privately via the "Report a vulnerability" button on the Security tab instead.