Do not open a public issue for a security problem.

Use private vulnerability reporting on GitHub. Tell us:

• the package or the hosted endpoint that has the problem
• the steps to make the problem occur
• the effect of the problem

We reply in 7 days or less.

We fix security problems in the latest released version only.