Please report security vulnerabilities responsibility by emailing security@simplesoftware.io.

We will fix the vulnerability privately, push a new release, and then go public with the notification.