Please don not share vulnerabilities publicly in GitHub or other platforms. You can report security issues by sending a email to security@abp.io Your report is immediately evaluated. We publish patch versions for critical vulnerabilities in a week at most.