Security is our #1 priority.

Please report vulnerabilities privately through GitHub's private vulnerability reporting: open the affected repository's Security tab and select Report a vulnerability. Never report a vulnerability in a public issue. Include the affected version, impact and steps to reproduce; do not include real credentials.

Maintainers will investigate, keep you informed and coordinate disclosure. Security fixes are released as soon as they are ready.

The latest release receives security fixes.