Please report (suspected) security vulnerabilities by opening an issue. If the issue is confirmed, a patch will be released as soon as possible, depending on the complexity.