Please report security vulnerabilities through GitHub's private vulnerability reporting: open the affected repository, go to the Security tab, and choose Report a vulnerability. This keeps the report private until a fix is ready.

Do not open a public issue for security problems.