Please do not open public issues for security-sensitive reports.

Report vulnerabilities by emailing the maintainer listed in AUTHORS. Include affected versions, reproduction steps, and impact.