Please do not open a public issue for a security problem. Use the Report a vulnerability button in the Security tab of this repository so the report stays private.
This is an example project that does not handle real user data. Reports are reviewed on a best-effort basis.