If you've found a vulnerability, please email [email protected] with the subject Vulnerability Report instead of creating an issue.