If you uncover a vulnerbility, please send an email to Ben to report it. Do not create a new issue or pull request until a plan is created.