Please report security vulnerabilities by email to [email protected]

The issue will then be triaged and if accepted, a patch will be made privately in a timely manner depending on the complexity of the fix required.