Report vulnerabilities privately through GitHub's "Report a vulnerability" (private security advisory) on this repository. Do not open a public issue for a security problem.

This repository contains patches against third-party projects. A vulnerability in the upstream project itself should be reported to that project; tell us if a patch here is affected.