If you think you have found a security issue in Servekit, email jared@jakacky.dev instead of opening a public issue.

I review reports and respond on a best-effort basis.