Please don't open a public issue, pull request or discussion for a security problem.

Report it through GitHub's private vulnerability reporting on the affected repository: its Security tab, then Report a vulnerability. If you're not sure which repository is affected, use limen-dev/limen.

What we want to hear about, what is out of scope and what happens next are in the Limen security policy.