Please do NOT open public issues for security vulnerabilities.

Email: tomas@reyes.ai with subject "The Tin security".

You'll get an acknowledgment within a few days. Please give us reasonable time to fix the issue before public disclosure. There is no bug bounty — this is a donation-funded hobby project — but reporters are credited in release notes if they wish.