If you discover a potential security issue in this project, please report to GrupoZAP CyberSecurity Team directly via email to cs@grupozap.com.
Please do not create a public github issue. Prefer to open a draft advisory.
If you want to learn more about security at web applications, this site is a nice place to begin.