Security
Report a vulnerability, privately.
Issues on AI17Z Code are public, and it has no private ones, so a vulnerability comes here instead. Only the maintainers read what you send. You do not need an account.
What is in scope, and what happens next, is in Security.