Please do not file public issues for security vulnerabilities. Instead, email [email protected] We will acknowledge your report within 48 hours.