Do not report security vulnerabilities in a public issue.

Use Amazon’s vulnerability reporting process: https://aws.amazon.com/security/vulnerability-reporting/

Include the affected PReMISE version, reproduction steps, and impact. Do not include API keys, private preference data, or other credentials.