Efforts to responsibly report security vulnerabilities are highly appreciated.
To disclose a security problem, please make a private vulnerability report issue, do NOT open a regular public issue.
A response will be sent, indicating the next steps, after the initial report handling.