Please reach out directly to the maintainers at [email protected] to report a potential vulnerability. Do not file a public issue.