If you discover any security related issues, please email mark@backstagephp.com instead of using the issue tracker.