Please never report possible security issues on GitHub tickets as those are public. Instead please report responsible via mail on our site only:

• https://www.zenphoto.org/pages/contact/
• https://www.zenphoto.org/pages/legal/

Reports should be made with the latest official release or the support/development bulild.