Please do not file a public ticket mentioning the vulnerability.

If you believe you found a security vulnerability please contact current maintainer as soon as practical - the team will triage severity and plan for rectification.