If you have found a vulnerability which you don't want to disclose via the public issue tracker, please send me an email.