Please report Oxytype vulnerabilities privately. Use GitHub private vulnerability reporting if it is available. If that form is unavailable, open an issue requesting a private contact channel without disclosing the vulnerability.

Include the affected version, steps to reproduce, and likely impact. Use public issues for ordinary bugs.