Please do not file an open issue for ongoing security bugs. Instead, email us directly with your findings at [email protected].