Do not open a public issue for an undisclosed vulnerability or an exposed secret.

1. Use GitHub private vulnerability reporting on the affected repository when it is enabled.
2. Otherwise contact @Reaper-Legion privately.

Include: affected component, impact, minimal proof, suggested fix. Do not access data that is not yours. Do not test outside authorized scope.

Public tools in scope: mrholmes-osint-suite, steamie.