Efforts to responsibly report security vulnerabilities are highly appreciated.
To disclose a security problem, please make a private vulnerability report, do not open a public issue.
A response will be sent, indicating the next steps, after the initial report handling.