Should you find any security-related issue, please do not share them openly in the issue tracker. We have a dedicated mailbox where we keep track of them:

security@flomesh.io