by @yuzawa-san

Please use the "Private vulnerability reporting" functionality in the https://github.com/yuzawa-san/THIS_REPO/security page. Do not use the public issue tracker.