Please do not open a public issue for a suspected vulnerability.

Use the repository's private vulnerability reporting form in the GitHub Security tab. Include reproduction steps, affected versions or commits, and the expected impact.