Please report any vulnerability to [email protected] directly, preferably with the word "Security vulnerability" in the subject line, so we definitely won't accidentally miss it. You can expect us to respond to you within 24hrs.