Report a vulnerability

Report a security issue

This form files a private GitHub security advisory. Only the maintainers can read it, and you do not need a GitHub account to submit.

Submissions create a private security advisory on the project's repository. No account is required and nothing is posted publicly.

Please leave out secrets or personal data you would not want stored in an advisory. Anything you paste here is kept in the private report.

Non-security bugs and feature requests are welcome on the public issue tracker.