Do NOT open a public issue for security problems.
Use GitHub's private vulnerability reporting (Security tab → "Report a vulnerability"). Expect a response within 7 days.
This project is intended for authorized testing and educational use only. Reports about the project itself are welcome; misuse is out of scope.