Please report suspected security vulnerabilities privately through GitHub's vulnerability reporting. Do not open a public issue or discussion for a security vulnerability.
Include a description of the issue, steps to reproduce it, the affected Submilli version, and the potential impact. A small proof of concept is helpful. Do not include real credentials or private data.
We'll review your report and coordinate a fix and disclosure with you through GitHub. Please keep the details private until we've agreed on disclosure.
Thank you for helping keep Submilli secure.