Security fixes are applied to the latest main branch.
Please DO NOT file a public issue, instead send your report privately to [email protected].
Security reports are greatly appreciated and we will publicly thank you for it, although we keep your name confidential if you request it.