Please DO NOT report any security issues to public GitHub issue.
Please DO report security vulnerabilities via the Report Form so that we can fix the security problem to protect a lot of users around the world as soon as possible.
If you have anything else you want to report privately to developers, send us an email to the following email address. This is a private mailing list not open for public viewing. Do not send security reports to this address - it is private but not secure.
Due to the high volume of vulnerability reports we receive, duplicate reports are handled on a first-come-first-served basis, even if discovered independently by different parties. Consequently, only the first reporter will be acknowledged in the public advisory.
As reports remain confidential until public disclosure, reporters may not know if they are the first to submit. We appreciate your understanding.