If you uncover a vulnerability, please send an email to Joe to report it. Do not create a new issue or pull request until a plan is created.