Report vulnerabilities privately to drew@saucetech.io. Do not open public issues for security reports. You will receive an acknowledgement within 72 hours.