Do not open a public issue. Report it privately through GitHub security advisories, with the app version and steps to reproduce.

• Security
• Privacy