Should you find any security-related issue, please do not share them openly in the issue tracker. We have a dedicated mailbox where we keep track of them:

[email protected]

You can encrypt your message via Keybase (set recipient crystal) or with our PGP key (fingerprint 5995 C83C D754 BE44 8164 1929 0961 7FD3 7CC0 6B54) also available on Keybase server.