For any security related issues, please do not open a public GitHub issue. Instead, email them to webmaster@elementary.io. We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks (also, feel free to contribute a fix for the issue).