Reporting a security issue
Do not include secrets, private project data, or personal information in a public issue. The project operator must provide a private security contact and confirm the disclosure process before this page can serve as a security policy.