Security issue disclosure

[vlyv]

hey I found a security issue in this repo and I don’t want to share the details here in public if you’ve got a security policy I can follow let me know otherwise I can send it over by email or whatever way works best for you

[okybaca]

thanks! send it to ***@***.***, please. we should fill SECURITY.md: <https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository>