Please create a new issue on this repo describing the vulnerability, and (if known) how to resolve it.