If you believe you have found a security vulnerability in a Weblate project, do not open a public issue. Report it privately by emailing security@weblate.org or selecting Security → Report a vulnerability in this repository.
Please describe the issue, affected versions, and steps to reproduce it, if known.
For security scope and assumptions, consult this repository's threat model if it has one, or the Weblate threat model for the main application. The security documentation explains the full reporting and disclosure process.