Please report security issues privately before opening a public issue.

For now, use a private contact channel agreed with the maintainer. Do not include sensitive user data in public bug reports.