Please report vulnerabilities privately through GitHub Security Advisories. Do not open a public issue containing credentials, cookies, tokens, personal data, or a working exploit against a deployed instance.