Full disclosure is prefered policy for this project. It allows users to react as soon as possible to vulnerability.

To report a vulnerability please create an issue with all details.