Please do not report security vulnerabilities in a public issue.
Use GitHub's private vulnerability reporting feature when it is available for the repository. Otherwise, contact me through jannikreinhard.com.
Include the affected repository, a clear reproduction and the possible impact. Do not include real tenant data, access tokens or customer information.