Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting for this repository and name the plugin. We aim to acknowledge reports within 5 working days.
Each plugin's folder has a SECURITY.md describing what it can access.
Security fixes are released for the latest minor version of each plugin.