Do not report security vulnerabilities in a public issue.
Use GitHub's private vulnerability reporting for this repository. Include the affected ArchDev version, operating system, reproduction steps, and any known impact. The ArchAstro team will acknowledge the report and coordinate a fix and release without exposing the issue before users can upgrade.