Please do not open a public issue for security vulnerabilities. Instead, report them privately to the project maintainers (e.g. via a GitHub security advisory). We will acknowledge your report and work on a fix as quickly as possible.