Potential security issue

Hey there!

I belong to an open source security research community, and a member (@ranjit-git) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a `SECURITY.md` file with an email, or another contact method? GitHub [recommends](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository) this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

Start by reviewing GitHub's security policy guidance linked in the issue and the repository's current top-level files. Add a SECURITY.md with an email address or another contact method for responsible disclosure, then verify that the policy clearly tells security researchers how to report issues.

Written by the indexing model from the issue text.