Security vulnerabilities can be reported to us privately in the Security tab on Github. We aim to respond within 24 hours and will work hard to fix the issue as soon as possible.

Do not create a public issue for a security concern.