Please do not open a public issue.

Report privately through GitHub: go to the Security tab and click Report a vulnerability (https://github.com/endurain-project/endurain/security/advisories/new).

If you can't use GitHub, send an email to joao@endurain.com instead.

Please include:

• Steps to reproduce the vulnerability;
• Potential impact;
• Any suggested fixes, if available.

I will provide an acknowledgment when possible. Reporters are credited in the published advisory unless they prefer otherwise.

Thank you for helping keep this project secure!