Please don't report security vulnerabilities in public issues, discussions or pull requests.

Email hello@inbox.quakecstudio.com with:

• the repository and version or commit affected,
• what an attacker can do, and
• the steps to reproduce it.

You'll get a reply within a few days. We'll keep you updated while we work on a fix and credit you when it ships, unless you'd rather stay anonymous.