Facade Code is developed in the open at github.com/y5ez3g/facadecode.
Please do not report security vulnerabilities through public issues.
Report them privately, through the repository's private vulnerability reporting: the Security tab, then "Report a vulnerability". Please say:
- what is affected, and what an attacker could do with it;
- how to reproduce it, as short as you can make it;
- the version you saw it in, from Help > About.
You will get an answer there, and the fix and the advisory are published together once a release carries the fix.