Please do not publish suspected security issues in a public issue or discussion.
Report them privately to hello@openthebook.lol with a description of the issue, affected version, reproduction steps, and any relevant logs. Do not include passwords, private keys, access tokens, or personal data in the report.