For any security related issues, please do not open a public GitHub issue. Instead, email them to [email protected]. We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks (also, feel free to contribute a fix for the issue).