Please do not report security vulnerabilities in a public issue.
Use GitHub's private vulnerability-reporting form on the repository's Security tab. Include the affected revision, impact, reproduction steps, and any suggested mitigation. Avoid including real credentials, private project files, or personal data.
General bugs that do not expose security-sensitive information can use the public issue tracker.