Security Policy This is a toy program. Fix the problem you found by Pull Requests, otherwise just make declarations that this program is broken. I would be glad to accept. No need to make some "private disclosure".