Report vulnerabilities to [email protected].

Responses are usually withhin a day unless I'm travelling. No bounties are offered. If I don't respond within a week, please get creative about another mechanism to responsibly disclose the issue if it's serious.