Report a security vulnerability.

Thank you for looking. Describe what you found, how to reproduce it, and what impact you think it has. We triage security reports within two business days and do not pursue legal action against good-faith research.