Report vulnerabilities privately to greg@cotect.dev. Please do not open public issues for security problems. You will get a response within a few days.