Thank you for handling this properly. Security reports are
never published and never appear on the status page — they go straight to the team. Please give us a reasonable window to fix it before discussing it publicly. Our
disclosure policy sets out what we promise in return.