Please report security vulnerabilities by email to [email protected]. This email is an alias to a subset of our maintainers, and will ensure the issue is promptly triaged and acted upon as needed.