Please do not file a public issue on Github mentioning the vulnerability. To find out how to disclose a vulnerability, please email us at contact@ironfish.network.