Please report security vulnerabilities privately via GitHub Security Advisories — do not open a public issue. If you can't use that, email tyler@nivin.tech.

We'll acknowledge your report as quickly as we can and keep you posted on the fix.