Please do not report security vulnerabilities in public issues.

Use GitHub's private vulnerability reporting feature when it is available. Otherwise, email mark.chen.im@gmail.com with:

• the affected repository and version or commit;
• steps to reproduce the issue;
• the expected impact; and
• any suggested mitigation.

Do not include live credentials, personal data, or destructive proof-of-concept material. You should receive an acknowledgement within seven days.