Do not report a vulnerability in a public issue.

Report it privately through Security → Report a vulnerability in the repository. If you cannot use GitHub, write to rupeefund@fossunited.org.

Give the affected page or file, the steps to reproduce, and the effect.

Only the latest commit on main gets fixes.