Please contact us directly at [email protected] for any bug that might impact the security of this project.
Once we have acknowledged receipt of your report and confirmed the bug ourselves we will work with you to fix the vulnerability and publicly acknowledge your responsible disclosure, if you wish.