to report a vulnerability please contact cjlapao@gmail.com or if you can please raise a pr with the fix for approval