Please report all security issues to our central project. Also, see our Security Policy which is hosted in that repo.