The CVBuilder.dev team and community take all security bugs seriously. Thank you for improving the security of cvbuilder.dev.
We appreciate your efforts to disclose the issue responsibly, and will make every effort to acknowledge your contributions.

Report security bugs by emailing the lead maintainer at contact@bensouchet.dev and include the word "SECURITY" in the subject line.

The lead maintainer will acknowledge your email within a week (7 days), and will send a more detailed response up to 48 hours after that indicating the next steps in handling your report. After the initial reply to your report, the security team will endeavor to keep you informed of the progress towards a fix and an announcement. We may ask for additional information or guidance.

As mentioned earlier, send an email at contact@bensouchet.dev with the word "SECURITY" in the subject line, and give details on what exactly is impacted. And please document steps on we can reproduce your findings.