Report security vulnerabilities to [email protected] instead of the public issue tracker.

You will get a response within 48 hours.