If you believe you have found a security issue which affects Grapl's users, please reach out to security-reports@graplsecurity.com. We will work with you to resolve it safely and quickly.
Please refrain from public disclosure until the issue is resolved.