Please follow the security issue reporting guide to report security vulnerabilities responsibly. Do not use the public issue tracking system for that.