Please report a vulnerability privately through GitHub: the repository's Security tab, Report a vulnerability. Do not open a public issue for it.

Direct link: https://github.com/lightwebinc/bbox/security/advisories/new

A fixed vulnerability is disclosed in a GitHub security advisory and in the release notes of the version that fixes it.

A report is most useful with the version, what you ran, what you expected, and what happened instead. We aim to acknowledge within three working days. Supported: the latest release.