Please do not disclose suspected vulnerabilities, credentials, private information, or exploitation details in a public GitHub issue.
Use the contact route on the BFEP website:
Include only the information needed to understand and reproduce the concern. Do not include unrelated personal information or live credentials.
Security fixes apply to the version currently deployed on the public BFEP
website and to the latest source on the main branch.