Please report vulnerabilities privately through GitHub's private vulnerability reporting for this repository, not in public issues.

The ports run no JavaScript and make no network requests of their own. Chart data and options passed to them are treated as data. Reports about behaviour that breaks that are especially welcome.