FYI: we have security disclosures enabled on the public repo. If you find any security concerns, please use that feature to privately disclose it to us :)
Commit
93226f6
I have reported vulnerability yesterday and also opened PR for that, but no one responded yet :(
commit 93226f6