Please do not file a public issue on Github mentioning the vulnerability. To find out how to disclose a vulnerability, please email us at [email protected].