If you have found a security related issue, please do not file an issue on GitHub or send a PR addressing the issue.

Contact us directly and you will be given full credit for your disclosure.