Please do not open GitHub issues or pull requests - this makes the problem immediately visible to everyone, including malicious actors.

To report a security vulnerability, use Github Security Advisories or [email protected] email.