Security fixes are released for the latest version only. Please upgrade to the latest release before reporting an issue, and check that it still reproduces.

Please do not open a public issue or discussion for a security problem.

Report it privately through GitHub:

1. Open the repository's Security tab.
2. Click Report a vulnerability.
3. Describe the issue, the affected version, and the steps to reproduce it.

Useful details: the version or image tag, how the instance is configured (authentication type, reverse proxy), and what an attacker needs in order to exploit the issue.

• Reports are reviewed and acknowledged as soon as the maintainer is able to; this is a single-maintainer project, so please allow some time.
• Confirmed issues are fixed in a new release and published as a GitHub security advisory, with credit to the reporter if they wish.
• Please give the maintainer reasonable time to release a fix before disclosing the issue publicly.

See the Security Advisories of this repository.