Please report (suspected) security vulnerabilities to marvin@sneak.page. It would be great if you could prepare a patch too. Thanks!