Please report security problems privately: on this repository's Security tab, choose "Report a vulnerability", or go to https://github.com/zakijss/MiniFin/security/advisories/new. Don't open a public issue for them. Say what you found, the release, and how to reproduce it; a fix ships in a new release, and only the latest release gets fixes. MiniDeck's security policy covers all the apps.