Is there a place to be notified of gin security issues? If submitting to issue is not a problem, I will try to describe the Issue directly.

P.S. A feature called "Privately reporting a security vulnerability" has recently been released by Github, so if enable it and I will contact you from there.

https://docs.github.com/ja/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability