If you've found a vulnerability, please email security@expensify.com with the subject Vulnerability Report instead of creating an issue.