🙊 Please do not open a public issue for a vulnerability.

Report it privately instead, from the Security tab of the repository › "Report a vulnerability". If that button is missing, write to vincent.foriel@gmail.com with "Security" in the subject.

Please include what is affected (repository, page or function, version), how to reproduce it, and what an attacker could do with it.

⏱️ You will get an answer within a week. Once a fix is published, you can be credited in the advisory if you wish.

Only the latest version of each project receives security fixes.