Please do not report security vulnerabilities in a public issue.
Use GitHub private vulnerability reporting to send the maintainers a confidential report. Include the affected version, impact, reproduction steps and any suggested mitigation.
The maintainers will acknowledge the report, assess affected releases and coordinate a fix before public disclosure. General support requests can be sent to support@croit.io.