If you've found a security vulnerability, report it in GitHub's security tab. This will allow us to privately work with you to fix it as soon as possible.