Please report security issues privately, through GitHub's private vulnerability reporting:
That opens an advisory visible only to you and the maintainers. If you cannot use GitHub, email support@insumermodel.com.
Please do not open a public issue for a suspected vulnerability. If you already have, that is not a problem — it will be handled the same way.
Your report will be acknowledged. Beyond that, no response time is promised.
If a report is confirmed, a GitHub Security Advisory is published and you are credited as the reporter unless you ask otherwise. Tell us the name or handle you would like used.
The affected version, the code path or endpoint involved, and what an attacker gains. A proof of concept helps but is not required.