Please report vulnerabilities privately through GitHub's private vulnerability reporting, not in a public issue.
Never paste cookies, tokens, session.json contents, card details, addresses or
other personal data into issues, PRs or reports. Redact them first; grab auth status and grab food order --dry-run already print redacted output.
Issues in Grab's own services should be reported to Grab, not here.