# Security policy

Please **don't open a public issue** for a security problem. Report a vulnerability privately through GitHub's [private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability) on this repository. Include what you found, how to reproduce it, and what an attacker could do with it.

We'll acknowledge your report, keep you informed while we work on a fix, and credit you when it is released unless you prefer otherwise.