Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for dxcode-dev/dxcode.
Include affected versions, impact, reproduction steps, and any proposed fix. We will acknowledge a complete report within seven days.