FYI: we have security disclosures enabled on the public repo. If you find any security concerns, please use that feature to privately disclose it to us :)
commit 384a7d1
I have reported vulnerability yesterday and also opened PR for that, but no one responded yet :(