If you've found a bug regarding security please mail [email protected] instead of using the issue tracker. All security vulnerabilities will be promptly addressed.