Please do not publish sensitive security findings in a public issue.
Report security concerns privately to the repository owner through the contact information available at https://jeremiahlupton.com/.
Include the affected component, reproduction steps, expected impact, and any recommended remediation.