Please do not report security vulnerabilities in public issues or pull requests.
Report them privately to security@plainsight-systems.com. See also https://plainsight-systems.com/security/ and https://plainsight-systems.com/.well-known/security.txt.
Include enough detail to reproduce the issue. You will receive an acknowledgement, and we will keep you informed while the report is addressed.
This project is in active development. Fixes are applied to the main branch.