If you found a security issue, please do not open GitHub issues or pull requests - this makes the problem immediately visible to everyone, including malicious actors. Security issues in the SDK can be safely reported to VGS by email: security@verygoodsecurity.com
Before reporting security issue please read this guide.