Security reports are greatly appreciated. Thank you for responsibly disclosing your findings. We will make every effort to acknowledge your contributions.
Please DO NOT file a public issue. Send your report privately to scaleid+calmonrib@gmail.com instead.