Please don't report security vulnerabilities in public issues, discussions, or pull requests.
Report them privately through GitHub instead:
- Open the repository's Security and quality tab. If it's hidden, find it in the ... menu.
- Click Report a vulnerability.
- Describe the issue, the affected versions, and how to reproduce it.
The report is visible only to you and the maintainer. Once a fix is released, the advisory is published, and you can be credited as the reporter.
If you can't use GitHub's reporting form, contact me privately through hirok.io/contact.
Only the latest release of each project receives security fixes.