If you believe you have found a security issue, please report it via PGP encrypted email to x@lennis.dev. Please do not report security issues through the GitHub issue tracker. You can find my PGP key here.