Please report security vulnerabilities privately using GitHub's private vulnerability reporting: go to the repository's Security tab and click Report a vulnerability (Security advisories -> Report a vulnerability).
Do not open public issues for security problems.
Reports are typically acknowledged within a few days. Thank you for helping keep these projects secure.