Please file a private vulnerability via GitHub, email @ljharb, or see https://tidelift.com/security if you have a potential security vulnerability to report.

See our Incident Response Process.