Please report a vulnerability privately rather than in a public issue: use Report a vulnerability on the repository's Security tab, or email me at dbetebenner@nciea.org.

Tell me which repository and version are affected, how to reproduce the problem, and what an attacker could do with it. I'll acknowledge the report within a week and keep you posted until it's resolved.

If you find student-level or otherwise confidential data in any of my repositories, report it the same way, and please don't download or share it.