If you believe you have found a security vulnerability, please report it privately through GitHub's private vulnerability reporting on the repository's Security tab (choose Report a vulnerability). Please do not open a public issue for an unpatched vulnerability.

For the app's general privacy and security architecture, see PRIVACY_AND_SECURITY.md. This file is specifically for reporting vulnerabilities.