If you discover a security issue, please do not open a public issue.

Instead, contact the maintainers (or open a private security advisory if your Git host supports it).

We will acknowledge receipt and work on a fix.