I found a security vulnerability

Thank you. Please report it privately to [email protected] with steps to reproduce. Don't access other people's data, don't disrupt the service, and don't share the issue publicly until we've fixed it.