Feel free to open a public issue here if you found a security vulnerability.

If, for whatever reason, you prefer to not make it public, please write an email to clement.douin@posteo.net.