If you discover any security related issues, please use GitHub's private vulnerability reporting.

We will review all reports and fix any confirmed vulnerabilities as soon as possible. Please note that we are unable to offer any monetary rewards or bug bounties for reported issues.