To report security concerns, please send a mail to [email protected] instead of opening a public issue.