Vulnerability reports for any scampi project go through scampi's security policy.

Please don't file public issues for security bugs.