Please reach out if you think you've found a security issue.

Email Evan Hahn at [email protected], on Signal at EvanHahn.64, or in other ways.

My playbook for security issues:

• Acknowledge and address the concern as soon as possible
• Issue advisories (CVEs, for example) as needed. Public disclosure may be embargoed to give people time to update
• Consider patching non-current major versions depending on popularity and severity