Please do not disclose a suspected vulnerability in a public issue.

Use GitHub's private vulnerability reporting for the PhreshOS/server repository. Include the affected version, the smallest reproduction available, the impact you observed, and any suggested mitigation. Security reports will be assessed against the latest published release.