Please email us at [email protected] reporting details about the vulnerability you have identified. Issues with dependencies (such as outdated versions of jQuery) are not accepted.