For reporting security vulnerabilities, please DON'T use github issues. contact me at [email protected] and I will get back to your ass soon as possible, historically in 48 hours. And the issue will most likely get resolved within 24 hours depending on the time, that the issue was reported.