Please do not open a public issue for security problems. Report them privately through GitHub's private vulnerability reporting, or by email to mohamed@rustix.xyz.
Include the egg version, the PHP version (Docker image) of the server, your panel version and the steps to reproduce. You'll get a reply as soon as possible, and a fix will be released before the issue is made public.
Only the latest egg release and the current Docker images get security fixes.