Keep it simple
If you think you have identified a security related issue, please report it immediately to [email protected].
Better not open issues related to any security concerns publicly.
When reporting an issue, include as much information as possible.