Please do not file public issues for security vulnerabilities. Instead, email paylinkmcp@gmail.com We will acknowledge your report within 48 hours.