Please do not open public issues for security vulnerabilities.
Instead, contact:
gondim at gmail.com
(or GitHub/Codeberg private advisory)
- affected version
- reproduction steps
- impact
- proof of concept
- suggested fix (optional)
I will acknowledge reports as soon as possible.
I prefer responsible disclosure.
Security issues will be fixed before public disclosure whenever possible.