If you think the bug you found is likely to make project based on this library vulnerable to an attack, please do not use public issue tracker but report it to contact@ardikars.com.