Please DO NOT use GitHub issues or other public channels to report security vulnerabilities.

Instead, report any security vulnerabilities via Tidelift security contact. Tidelift will coordinate the fix and disclosure.