Please report (suspected) security vulnerabilities to sgx2050@gmail.com. I will try my best to respond as soon as I can. If the issue is confirmed, I will release a patch as soon as possible depending on complexity.