Please send me an email at b@ptistefontaine.fr if you found a vulnerability in one of the packages I manage (anything under https://github.com/bfontaine/).