Please do not file a public GitHub issue for security vulnerabilities.
Instead, send an email to umingo@gmail.com with the subject line:
Loopolis Security
We will respond within 72 hours and coordinate a fix before any public disclosure.
For ordinary bugs and unexpected behaviour, please use GitHub Issues.