Merge pull request from GHSA-878m-3g6q-594q Co-authored-by: Francisco Giordano <fg@frang.io> (cherry picked from commit 8ba26f388f)
8ba26f388f