Please report security vulnerabilities by emailing the maintainers directly at vanshb@riftwatch.org. Do not file a public GitHub issue.
You should receive a response within 48 hours. If the issue is confirmed, a patch will be released as soon as possible.