If you've found a security vulnerability in Hugo Invi, please do not create an issue on the GitHub issue tracker as it will be visible publicly.
Instead, send an email to <support [at] cubiest [dot] org> and prefix the subject with "hugo-invi security: ".