If you find a vulnerability report it using the Github Issues page with the label SECURITY. We encourage responsible disclosure of security issues and appreciate any effort users take to identify possible issues within our artefact.