If you found any issues that might have security implications, please report it via https://tidelift.com/security or send an email to robin.chalas@gmail.com. DO NOT PUBLISH SECURITY REPORTS PUBLICLY.
The full Security Policy is described in the Tidelift Security Policy.