To report a security vulnerability, please send an email to security@augustoproiete.net. I will coordinate the fix and disclosure.