If you've found a security vulnerability in Godot, please do not create an issue on the GitHub issue tracker as it will be visible publicly.

Instead, send an email to security@godotengine.org.