Please report security vulnerabilities by contacting the maintainer privately at one of the communication options listed at https://github.com/jameslamb.