Please report vulnerabilities privately to info@projectnoosphere.org. Do not open a public issue or post them as a contribution on the site.
Helpful details: what you found, how to reproduce it, and what it could affect. Please don't access other people's data, degrade the service, or send secrets of your own.