If you have found a security vulnerability, please do not open up a GitHub issue; instead, please provide responsible disclosure emailing security at btclib dot org.