Please do not disclose a vulnerability in a public GitHub issue.
Send a concise report to preprun@outlook.com with:
- the affected URL or feature;
- reproduction steps;
- the potential impact;
- screenshots or request details with personal data removed;
- a safe way to contact you.
Do not access another user's data, run destructive tests, interrupt service availability or publish credentials.
PrepRun will acknowledge actionable reports and prioritise issues according to candidate impact and exploitability.