Please don't open a public issue for a security problem.

Report it privately through Security → Report a vulnerability on the affected repo, or email apps@betta.io. You'll get a reply within a few days.