Do not open an Issue to report a security vulnerability. Instead, please contact the developers and disclose the problem confidentially.