Please report security vulnerabilities using the GitHub privately reporting a security vulnerability functionality. We highly value your input and will get back to you as soon as possible. Please include steps to reproduce, context, and any further information that makes identifying and resolving the vulnerability as quickly as possible.
See the The CERT Guide to Coordinated Vulnerability Disclosure for additional background information about the coordinated vulnerability disclosure process.