Please DO NOT file a public issue, instead send your report privately to [email protected].

Security reports are greatly appreciated and I will publicly thank you for it, although I keep your name confidential if you request it.