Please report vulnerabilities privately using GitHub private vulnerability reporting: https://github.com/n0dal/inkroot/security/advisories/new
Do not report them in public issues.
In scope: the Inkroot app, its build and release pipeline, and the website.
Out of scope: Magisk, edl and Onyx firmware. Please report those to their own projects.