Please do not open a public issue for a security problem. Email dev@siriusquantum.com with a description, the version you tested, and the steps to reproduce it. We will acknowledge the report within three working days and keep you informed until it is resolved.
Security fixes go into the latest release on PyPI. Zilver is alpha software, so please upgrade before reporting.