Please do not report security problems in public issues.
Report them privately through GitHub: open the Security tab of this repository and choose Report a vulnerability.
This covers the SDK code in this repository. Problems in the boxd platform itself are welcome through the same channel.