Security Report security issues privately to project maintainers. Do not open public issues for vulnerabilities before coordinated disclosure.