Security

Please report suspected vulnerabilities using GitHub private vulnerability reporting when enabled. If it is unavailable, contact the repository owner through an existing trusted private channel. Do not put credentials, exploit details, or private user data in a public issue.

Include the affected version, a description of the impact, and steps to reproduce using a test environment. Avoid testing against other people's instances or accounts. Private vulnerability reporting is enabled for this repository. Reproduce reports on the latest release when possible; older versions may lack fixes. No response-time guarantee is provided.