Security issues and bugs should be reported privately via email to [email protected]. You should expect a response within a week.

Please do not open issues for anything you think might have a security implication.