Please do not report security vulnerabilities through public GitHub issues.

Instead, please create a security advisory. Then please make @johlju aware that you created a security advisory.