Please report security vulnerabilities through Sigma Computing's Vulnerability Disclosure Program:

https://www.sigmacomputing.com/product/vdp

Do not open public issues or pull requests for security reports.