The canonical security policy for this repository is SECURITY.adoc.

Please do not disclose suspected vulnerabilities in a public issue. Use GitHub private vulnerability reporting so the maintainers can investigate and coordinate a fix privately.