Security issues and bugs should be reported privately to the maintainers, either by emailing [email protected].
You should receive a response within 72 hours.

Please do not open issues for anything you think might have a security implication.