Security issue disclosure

[vlyv]

hey I found a security issue in this repo and I don’t want to share the details here in public if you’ve got a security policy I can follow let me know otherwise I can send it over by email or whatever way works best for you

[pqarmitage]

Please send information via email which you will find in the Signed-off-by field of any recent commit message.