If you found any issues that might have security implications, please report it via https://tidelift.com/security or send an email to [email protected]. DO NOT PUBLISH SECURITY REPORTS PUBLICLY.
The full Security Policy is described in the Tidelift Security Policy.