Please reposrt (suspected) security vulnerabilities to security@trunk.io. You will receive a response from the team within 48 hours. If the issue is confirmed, we will create a new release as soon as possible.