If you're not a Lumaris contributor and have found vulnerability, send a mail to vulnerability@support.lumaris.fr.eu.org and we will look at what your found. Thank you