Please do not open a public issue for a security problem.

Report it privately through GitHub instead: open the repository's Security tab and choose Report a vulnerability. Only the maintainers can see the report, and we reply there.

If you cannot use GitHub, contact us through https://meetrix.io/contact-us and ask for a private channel. Don't include the details in that first message.

Helpful things to include:

• what an attacker can do, and what they need first (an account, a role, network access)
• steps to reproduce, or a proof of concept
• the version or commit you tested

Fixes go into the latest release. Please check that the problem still exists there before reporting it.