Do not disclose vulnerabilities in public issues. Please report vulnerabilities to [email protected] with steps to reproduce the vulnerability, and a patch to fix it if possible.