Please report vulnerabilities privately through GitHub's private vulnerability reporting, not in a public issue.