Please report security vulnerabilities privately through GitHub's private vulnerability reporting. We will coordinate the fix and the disclosure with you.