Please email @ljharb or see https://tidelift.com/security if you have a potential security vulnerability to report.