Please report suspected vulnerabilities to giuseppe.lettieri@unipi.it. You will receive a response as soon as possible. Patches will target the master branch.