Please report security vulnerabilities through public GitHub issues. We will try to acknowledge receipt of the vulnerability within 48 hours and work with you to resolve the issue.