Please report vulnerabilities privately via GitHub Security Advisories rather than a public issue. You should get a reply within 72 hours.

Especially interesting: ways for a page or plan to escape the VM, reach 127.0.0.1 services from outside, bypass the approval guard or the secret filter, or write to the audit log without being logged.

The design and its limits are described in docs/security.md.