Please do not open a public GitHub issue for security vulnerabilities.

Use GitHub private vulnerability reporting:

1. Open this repository on GitHub.
2. Go to the Security tab.
3. Choose Advisories, then Report a vulnerability.

You should receive an acknowledgement within 7 days.

This policy covers the source in this repository.

Security fixes are considered for the default branch and the latest release, if any.