If you discover a vulnerability, please do not open a public issue right away. Email the maintainer and allow a reasonable time to remediate before disclosure.