Please disclose any issues responsibly by using the private vulnerability reporting option from GitHub or emailing them to raj.bos+github_security@gmail.com.

I'm happy to have a look into it!