In a case of a security vulnerability that you have found, please report this confidentially to Arjun Sharda via email ([email protected]) and notify him about it. Make sure to not share it with anyone and do not create a pull request/issue as a fix to it unless said so.