Please see the readme.
Please DO NOT report security issues via public mediums such as GitHub issues, forums, public mailing lists or Matrix.
Please report all security issues via an email to the private mailing list [email protected].
The [email protected] email list is used for messages about Flatpak security announcements. You can join the list here. Security issues may also be announced via GitHub security advisories.