** REJECT ** GitHub has been informed that the requestor is working with another CNA for these vulnerabilities.