Trying to get in touch regarding a security issue

Hey there!

I'd like to report a security issue but cannot find contact instructions on your repository.

If not a hassle, might you kindly add a `SECURITY.md` file with an email, or another contact method? GitHub [recommends](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository) this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

从 GitHub 推荐的安全策略指南开始，并检查 repository 根目录中是否存在 SECURITY.md。添加一个包含电子邮件地址或其他负责任披露联系方法的 SECURITY.md 文件；当安全研究人员能够找到清晰的报告说明时，工作就完成了。

由索引模型根据 Issue 内容生成。