If you find a vulnerability, please open an issue with a minimal repro. Do not include secrets. For sensitive reports, contact me via GitHub Issues and we'll coordinate a private repro.