Do not file exploitable security details in a public issue.
Use GitHub's Report a vulnerability feature for this repository. Include the affected route, impact, reproduction steps, and any suggested mitigation. Authentication bypasses, cross-profile writes, unsafe media delivery, and exposure of private profile email addresses are treated as high priority.