Report vulnerabilities privately through GitHub's "Report a vulnerability" (Security tab) on this repository. Please do not open public issues for security problems.

See docs/security.md for the threat model and the protections in place.