Please report vulnerabilities privately via GitHub's private vulnerability reporting.

You may also email sergey.bokonyaev@gmail.com. Include reproduction steps and affected version; attach a proof of concept if you have one.