Please do not report security vulnerabilities through public GitHub issues.
Use GitHub's private vulnerability reporting instead: open the Security tab of this repository and choose "Report a vulnerability". Include enough detail to reproduce the issue, and do not include real credentials or personal data.
This is an as-is research project maintained on a best-effort basis, so response times may vary.