To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.

You can also send an email to [email protected] for direct contact with the maintainer.