Please do not report security vulnerabilities through public GitHub issues.

Instead, email pete.the.anderson@gmail.com with a description of the issue and steps to reproduce it. I'll respond as quickly as I can and coordinate a fix before any public disclosure.