If you detect a vulnerability in this project, please report it privately to alice@cottonwood.edu. DO NOT SUBMIT IT AS A PUBLIC ISSUE.
This is a learning experiment done in my spare time, so I might take 120 days to disclose the vulnerability along with a fix.