Please report security issues or incorrect public-risk guidance through the contact channels listed at https://czb.com/security-lab.html.
Do not submit secrets, credentials, full key material, sensitive backups or private customer data in GitHub issues.