Please send me an email at [email protected] if you found a vulnerability in one of the packages I manage (anything under https://github.com/bfontaine/).