If you think you’ve found a vulnerability in timberjack, please open a private security advisory: https://github.com/DeRuina/timberjack/security/advisories/new We’ll acknowledge within a few days and work on a fix. Thanks!