Please do not report security vulnerabilities through public GitHub issues. The easiest way to report a security issue is privately through GitHub. See Privately reporting a security vulnerability for ...