Potential Security Issue

Hi, I am Cris from Endor Labs Security Research Team. Can you please create a security policy for this repository to aid with communicating security-sensitive information? Alternatively, you can create an advisory and invite me there or simply share an email where I can directly send my findings. Thanks in advance!