Revoco processes statutory withdrawal declarations, which contain personal data, so security reports are taken seriously.

Please do not open a public issue for security problems. Instead:

1. Preferred — open a private report via GitHub Security Advisories ("Report a vulnerability" on the repository's Security tab).
2. Or e-mail the maintainer: craschke@chrido.net.

Please include the affected version or commit, reproduction steps, and the impact. We aim to acknowledge within a few working days and will coordinate a fix and a disclosure timeline with you.