To report a security vulnerability, please submit a bug report via the GitHub issue tracker here. Be sure to explicitly mention in the report that the issue pertains to a security concern.