If you find a security vulnerability, please report it privately by emailing nathan@nathancurtis.to instead of opening a public issue.