If you find a vulnerability please open an issue (bug report) with the flag security and affect the issue to thomaspoignant.
I will look into it as soon as possible and will give you more information in the issue as soon I have somne.
You can directly click here and your issue will have the good label and assignee: OPEN SECURITY ISSUE.