Do not open a public issue for a security vulnerability. Report vulnerabilities through GitHub's private vulnerability reporting feature for this repository: open the repository's Security settings and use Report a vulnerability.