Security PolicyReporting a VulnerabilityPlease use GitHub's private vulnerability reporting.You can expect an initial response within 48 hours.