Please report security vulnerabilities using GitHub's private vulnerability reporting feature. We highly value your input and will get back to you as soon as possible. Please include steps to reproduce, context, and any additional information that helps us identify and resolve the vulnerability quickly.

Do not open a public issue, and do not include credentials, protected health information, participant-level data, or private deployment logs in a report. Use synthetic data in any reproduction.

A repository passing its checks does not establish institutional approval, HIPAA compliance, or authorization to process controlled data.

See The CERT Guide to Coordinated Vulnerability Disclosure for additional background information about the coordinated vulnerability disclosure process.