If you suspect that your issue has a security impact, do not use the issue tracker. In that case, please report it using GitHub's support for privately reporting security issues.