Please do not open a public issue for a security problem.

Report it privately through GitHub: https://github.com/GeiserX/gramps-web-toolkit/security/advisories/new

You will get an answer within 72 hours. Include what you found, how to reproduce it, and the version or commit you tested.

Only the latest release on PyPI (https://pypi.org/project/gramps-web-toolkit/) receives security fixes.