If you have found or just suspect a security problem somewhere in trurl, report it via https://github.com/curl/trurl/security.

We treat security issues with confidentiality until controlled and disclosed responsibly.