We take all security issues very seriously. Please report them via our private issue tracker so that we can resolve them before making their details public.