Please do not create GitHub issues to report security vulnerabilities. Instead, report them via http://eddiejaoude.io.