Please do not open a public GitHub issue for security problems in OpenDrop.
Report vulnerabilities privately by email to fernandogarzaaa@gmail.com. Include a description of the issue, steps to reproduce, and the affected version or commit. You should get an acknowledgement within a few days; please allow time for a fix before any public disclosure.
Only the latest code on the default branch receives security fixes.