Please report security vulnerabilities through GitHub's private vulnerability reporting: go to the Security tab and click Report a vulnerability. This keeps the report private until a fix is available.

Please do not open a public issue for security reports.