Please report vulnerabilities privately instead of opening an issue:

1. GitHub: report a vulnerability (private vulnerability reporting).
2. Email: contact@haruhime.moe, if you can't use GitHub.

Include steps to reproduce and the impact you expect. You'll get a reply within 7 days.