Please avoid publishing sensitive security information in public issues. An official reporting channel should be added here when one is established.