Please do not open public GitHub issues for security vulnerabilities.

Instead, please notify us via github's built-in reporting feature: Security tab -> Report a vulnerability