If you notice a security vulnerability, please DO NOT open a public issue. Instead, report one privately so I can work with you to fix it before anyone attempts to exploit it.