If you discover a security issue, please do not file it publicly. Instead, contact the maintainer directly or use a private channel. When reporting, include reproduction steps, affected versions and any sample data.
You can also contact the project owner at the email in README.md for responsible disclosure.