Please report security issues privately through GitHub: Security → Report a vulnerability on this repository. Don't open a public issue.

Include the platform, app version and steps to reproduce. I'll acknowledge reports within a week. Fixes ship in the next release; only the latest release is supported.