Report security vulnerabilities privately through GitHub's private vulnerability reporting for this repository. Do not report them in public issues, discussions or pull requests.

Include the affected package and version, the steps to reproduce the issue and, if known, its impact. Maintainers follow up in the advisory.