Please do not open GitHub issues or pull requests for security reports. Public threads can expose the problem to everyone, including malicious actors.

Send reports to hello@ivanbelousov.com

Thank you for your attention to this matter!

PGP: 8DEE AD99 E07E 3285 9B4B E61A 616D 5D96 311B 5945