Found a vulnerability? Report it privately to ansumanshah@gmail.com instead of opening a public issue. We'll acknowledge within a few days.