Please report security problems privately rather than opening a public issue. The preferred way is GitHub's private vulnerability reporting — open this repository's Security tab and choose "Report a vulnerability" — or contact the project's owner or maintainer privately. Include enough detail to reproduce the problem.