Report a vulnerability privately at https://github.com/mplemay/rowx/security/advisories/new.

Do not open a public issue for a vulnerability.