If you've found a security vulnerability in Godot, please do not create an issue on the GitHub issue tracker as it will be visible publicly.

Instead, send an email to the "General inquiries" email address listed on the website's Contact page.